“Default privacy settings are crucial, as children are likely to accept the default settings that are in place when they start using a service. By default, you should not collect more personal data than you need to provide each part of your online service. You should also not make the child’s personal data visible to indefinite numbers of other users of the service.”