@webhat I'd propose to the kid that the account should be registered to an email address you control, and you should know the account's password. Then you can regularly check what is getting recommended by the algorithm. Just to reiterate, this should be conditions they consent to, nothing done behind their back.