Web companies used to forbid accounts belonging to children under the age of 13 until what, 5-10 years ago?

I was under the impression that that was US law, so I was initially surprised at the rapid fluorishing of child accounts on nearly every service. But there seems to be a "...without parental consent" rider in our laws about data collection, and that consent is now assumed to be freely given.

Really though, children should not be using these devices to communicate or access web services unsupervised. You are the parent, not the phone.