A small change in the default—shifting from opt-out to opt-in—marks a big step toward protecting your child’s personal information from being sold without your knowledge.