A child's name or email may be collected without prior consent only: to obtain parental consent, with permanent deletion if consent is not obtained within a reasonable time and no re-contact; to answer a particular request from a child a single time, then deleted and not reused, with no notice required; to answer a child's request on several occasions, with immediate direct notice to the parent after the first response explaining the collection, the multiple contacts, the parent's right to refuse and require deletion, how to refuse, and that silence permits the stated use; to protect the child's safety on the product, with the same kind of direct notice and no re-contact or disclosure; or to protect the product's integrity or security, take precautions against liability, respond to judicial process or assist law enforcement or public-safety investigations, with no other use and no notice required.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.