I would only allow them to do online purchases themselves once they turn 14 or so. No restrictions what they spend their money on. Reduces the risk of them falling for phishing and scams