← Guides

Age Verification Collects More Than Age

Age checks now gate legal content in the UK, Australia, Germany, France, and parts of North America. They do not just ask for your birth date. They pull biometrics, document data, payment records, and device data. The UK's Online Safety Act and Australia's social media minimum age law push hardest.

The Laws Push the Capture

What the Tech Actually Takes

Three methods dominate. None stay small.

1. Facial Age Estimation

Providers may say they delete your image after processing. They still send it to remote servers first. The token they issue after the scan can tie to your device and follow you across sites that use the same vendor. Some systems also track eye movement and micro-expressions for liveness checks. Many generate a risk score that can send your session to a human reviewer.

2. Credit Card / Financial Verification

The card number is not the main problem. The merchant category code is. It tells the processor what kind of site you touched. That leaves your legal name, billing address, and card linked to a category of browsing. The record sits with your bank or card network and can outlive the site itself.

3. Government ID / Digital ID

This is the hardest one to unwind. Systems like Experian OneID, GBG, and Jumio scan your document, extract your name, date of birth, ID number, and nationality, then log which sites asked for the check. That data lands with a private identity company. Fraud flags and document scores from one check can follow you into later checks in totally different contexts.

Breaches Hit Harder Here

Age verification databases are ugly breach targets because they join legal identity to sensitive browsing. In 2019, AgeID drew criticism over exposed user verification data before the UK rollout collapsed. In 2022, Veriff exposed internal records tied to identity checks.

The UK's ICO (Information Commissioner's Office) has said no current age verification system fully preserves privacy under GDPR. The mandates keep coming anyway.

How to Avoid the Capture

Age Checks Feed Digital ID

This is not just about minors finding porn. Governments are building identity gates for the wider internet. The UK roadmap ties age verification to its "One Login for Government" digital identity system. Australia's Digital ID Act 2024 builds a federated identity frame that age checks can feed.

Once verified identity becomes the price of access, the same stack can gate political speech, health information, finance, or anything else the state wants to meter. Age verification and general internet censorship use the same machinery.

VPNs, Tor, and private DNS are not convenience hacks. They block a growing identity log.

Cunicula receives no funding from any government body, age verification company, or internet service provider.