Anticipating this objection I looked at some COPPA info briefly (I'm in the UK, in not that familiar with USCs) and it suggested that the jurisdiction was based on location of the controlling company or the servers (either being sufficient) and not location of the children accessing the service. That makes sense as otherwise company's could just use offshore servers and bypass the regulation.