Photo ID

Supported UK IDs: Apple’s UK page lists passports, driving licences and PASS-accredited proof-of-age cards (CitizenCard, My ID Card, TOTUM ID card, Young Scot National Entitlement Card). The 18 September 2026 version of Apple’s adult-confirmation page adds that passport scanning is available in Australia, Singapore, the UK and Texas, and that a Digital ID in Apple Wallet created from a US passport can also be used. The ID image is used for age confirmation and fraud prevention, then deleted; no exact duration is given.

Bluesky’s own post names only credit card and face scans. KWS’s developer page lists the ID route: “A user in all regions, except the Republic of Korea, can verify their age by scanning the front and back of their government-issued identification (ID) documentation.”, “In the United Kingdom, users will also be required to take a selfie to confirm their identity matches their ID documentation.” and “Veriff (veriff.com) verifies scanned ID documentation.” Whether Bluesky offers this route to UK users is not stated by Bluesky.

Bumble’s article: “ID Verification helps us make sure you’re who you say you are. We use your ID to check your age and photo.” The member uploads a government-issued ID such as a passport or driving licence and takes a live selfie. Bumble’s privacy policy: “If you choose to also verify your ID, our third party partner called Veriff will carry out the ID check on our behalf. Veriff will compare a selfie you take to your ID document.” A manual review without facial recognition can be requested. Where collecting identification numbers is not permitted, Bumble says it redacts them on receipt and deletes the original image after redaction. Bumble’s policy gives no separate period for its own copy of an ID beyond its general line that “Almost all profile data is deleted 28 days after account deletion/erasure”. Bumble’s South Korea page describes a manual ID route through Veriff’s portal.

Character.AI’s data page: “A government-issued ID is only requested as a final step if Persona is unable to confirm your age from the selfie alone.” Its FAQ: “During the age verification process with Persona, some users are required to provide a government-issued ID based on the results of the initial face scan. In this case, an accepted form of ID is required to continue. Without a valid ID, the verification process cannot be completed and the account cannot move forward.” Its troubleshooting page lists driver’s licence, passport, passport card, identification card, consular ID, certificate of citizenship, permanent residence card and immigration visa, says “The image must be of a physical ID, not a digital or electronic copy”, and “there is no alternative to submitting a selfie or government ID if you are prompted to do so.”

Government ID upload; Persona checks the date of birth and that the selfie matches the ID photo. OpenAI's page says ID numbers may be covered before uploading.

Depop’s page: “If you’ve made a mistake, please contact support. We will ask you to provide a form of ID to verify your date of birth and amend it for you.” Depop’s privacy policy: “Where we cannot confirm your identity using other information that we hold about you or that you have provided to us, we may need you to send us copies of identification documents, which we will use together with your contact information.” and, on retention, “We will only keep your data for as long as we need it.” No period for identification documents is published, so the absence line applies.

Depop’s page says ID “may be required”; it does not say every seller is asked.

Depop’s page: under-18s who want to sell or buy through Depop Payments “may be required to provide a valid ID, or SSN if you are in the US, so we can verify your Depop Payments account.” Depop’s parents page: “further identification such as photographic ID and taxpayer information”. Depop’s terms say sellers sign up to Depop Payments “via Stripe”; its privacy policy names “Identification verification service providers, to verify your access to the Service and prevent fraudulent activity on your account” without naming them. No retention period is published, so the absence line applies.

Discord’s page: “What’s actually available to you depends on factors such as your region or device, so the options below may not be the same for everyone.”

Discord’s vendors page (September 2026): “The image of your ID is sent through a secure portal to Veratad, one of k-ID’s trusted third-party providers. Veratad confirms the document’s authenticity and extracts your age. Your selfie is compared to the photo shown on the ID to confirm it belongs to you.” This settles the earlier k-ID versus Veratad question: k-ID orchestrates, Veratad checks the document.

EA: “In some countries, an age check is required to access certain content.” Brazil is the only country EA names; EA says those requirements “apply only to players in Brazil and only to affected games”.

EA’s page, for adults whose check fails: “double-check that your name and date of birth match your legal ID”; “make sure your photo is clear. blurry or cropped images can cause processing errors.”; “if you're using a passport, scan the photo page only; for other IDs, include both front and back.” “Still stuck? Go to the KWS support page for more help.” “Sometimes you may be switched from a low-friction (like facial scan) to a high-friction method (like uploading ID).” EA’s EA app page: “You may be asked to share proof of identity. Your information is stored securely and used only for age assurance.” No retention period is published, so the absence line applies.

Available in the UK with a selfie; Epic’s own help page for adults correcting a date of birth does not list methods.

Kids Web Services’ developer page: “A user in all regions, except the Republic of Korea, can verify their age by scanning the front and back of their government-issued identification (ID) documentation.” “In the United Kingdom, users will also be required to take a selfie to confirm their identity matches their ID documentation.” “Veriff (veriff.com) verifies scanned ID documentation.” KWS’s privacy policy: “if you select ID Scan & Selfie as the method to verify your age, we will uniquely identify your image against your selected ID, which may be considered biometric data.” No deletion period for the ID or selfie is published by Epic or KWS.

Facebook’s page: “Yoti, a third-party age verification service uses a variety of options for people to verify their age on Facebook”, listing “Upload an ID” and “Take a video selfie”; “The ID that you choose must include a photo of your face and your date of birth.” with passport and driving licence as the types. Its “Types of IDs that Facebook accepts” page: “Facebook contracts with Yoti, a third-party age verification service, to ensure an age-appropriate experience for our users.” A separate page on identity confirmation says Facebook “may use an encrypted copy of the ID for up to one year” to improve fake-ID detection, with an opt-out under which it “will be deleted within 30 days”; the age-verification page carries the 30-day line without that qualification. “Depending on the laws in your region, you may also be required to get parental approval if we determine that you're under a certain age.”

Feeld’s article “If you fail age verification (or decide not to verify)” (updated 26 August 2025): after failing one method “You can retry that method one time” or “immediately try the other verification method”; “If you fail both methods: You’ll be prompted with a third method, allowing you to verify using an ID.” Feeld’s terms: “In limited circumstances, Members may elect to use Yoti for age verification by using a valid government identification card.” and “Any government identification data that members elect to provide shall be immediately purged from Yoti storage after verification.” The privacy policy also mentions an ID on support-ticket escalations.

Google’s page: “Your date of birth will be saved to your payments profile and updated in your Google Account to support your experience across Google services.” and “In certain cases, your ID may be subject to manual review in accordance with Google security policies.” Examples of valid ID: driver’s licence, passport, national ID card; “The types of ID you can use for age verification may vary by country.” The page gives country-specific redaction guidance for several European countries but none for the UK.

The ID route pairs a video selfie with an official photo ID; Grindr lists the accepted documents on the page.

Hinge’s page: “After completing your age check, you may be prompted to complete an ID check to help us confirm you are at least 18, in accordance with applicable legal requirements and guidelines (such as in the UK), and to check whether you appear to match the photo on your ID. You won’t be able to start connecting with people on Hinge until we verify your ID.” Documents listed: driver’s licence or learner’s permit, passport or passport card, national ID card, residence permit. “Hinge’s technology will check whether: Your Face Check scan matches the photo on your ID; and The date of birth on the ID indicates you are at least 18 years old.” If that fails, “a Hinge team member will review your ID manually”. “The results of the ID check (i.e., successful or not) are saved until 90 days after your account is closed (or 2 years if the account is banned).” “None of your ID check data appears on your profile or is shown to other daters.” An ID check is also how an appeal against an under-age removal is handled.

Instagram’s page: “Yoti, a third party age verification service uses a variety of options for people to verify their age on Instagram”, listing “Upload an ID” and “Take a video selfie”. “The ID you choose must include a photo of your face and your birth date.” Passport and driver’s licence are the types listed. Meta’s 23 June 2022 post: “Your ID will be stored securely on our servers and is deleted within 30 days.” Meta’s general page on IDs says storage “depends on what you’re using it for”, with up to 180 days for advertiser or Meta Verified checks and up to one year where fraud or abuse is suspected; the age-verification page carries the 30-day line. “Depending on the laws in your region, you may also be required to get parental approval if we determine you’re under a certain age.”

Availability varies by jurisdiction; the recorded FAQ does not confirm which methods UK viewers receive.

Only the front and back of the ID are scanned. Kick's FAQ adds that k-ID “does not retain any sensitive information you provide during the verification process. This includes credit card details, national ID numbers, and face scans.”

Microsoft: “Different countries/regions have different age verification partners.” The UK is listed as a country where you can verify now.

Listed as “Uploading a document” on Microsoft’s FAQ and its “How to verify your age for a Microsoft account” page (both dated 24 August 2026). Microsoft: “If one verification method doesn’t work, you can try another.”

Ondato’s case study (published 18 May 2026, moved to a new address) says OnlyFans requires users to verify “their age and identity through a comprehensive onboarding process” and that Ondato adapted its infrastructure for that onboarding; it does not name the document or biometric steps and gives no retention period.

Pinterest’s page: a photo of a government ID taken with the camera at the time of verification, together with a selfie. Pinterest’s privacy policy: “matching your face against a government ID”. “Please do not send any sensitive documents, such as your government ID or birth certificate, to Pinterest directly. We cannot process your age verification through our support emails or contact form.” No retention period is published.

The FAQ gives no retention sentence for the ID route beyond “Information you provide for age verification is processed by Yoti, our third-party provider.”

Reddit receives date of birth from the ID. Reddit’s own page (updated 6 October 2026): “Reddit does not receive or store these photos; we only store your verified age and status. Persona deletes your information immediately after it’s processed.”

Riot: adult verification is required “in some regions”; the regions are not listed and the UK is not named.

Riot: “a credit card or government ID that will be processed through Kids Web Services (KWS)”; “Riot doesn't store or access any of this personal information, it's only used by KWS to confirm you're an adult. For more information on that process and to learn more about how they handle your information, check KWS' Privacy Policy.” Neither Riot’s page nor KWS’s privacy policy publishes a deletion period for ID images, so the absence line applies.

Roblox’s Biometric and Facial Media Data Privacy Notice (effective 13 October 2025): “For identity verification, Persona captures a photo of your ID and a selfie.” and “Roblox may access the photo of your ID and selfie stored by Persona for training, product improvement, and compliance purposes. Roblox will not have access to the face geometry processed by Persona.” The 30-day period applies to biometric data from this ID route; facial age estimation images and video are covered by the newsroom statement on the row above.

Spotify’s sentence covers the age assurance process as a whole (facial age estimation or ID document verification through Yoti).

Threads’ page: “The ID you choose must include a photo of your face and your birth date.” Passport and driver’s licence are listed. “Depending on the laws in your region, you may also be required to get parental approval if we determine you’re under a certain age.” The Threads ID page states no retention period; Instagram’s equivalent page says “We’ll delete your ID within 30 days” (see the Instagram record).

Tinder’s page: “In some regions, including the UK, you may also be required to complete a secondary ID verification check.” Automated review matches the stored FaceMap to the ID photo; manual review (up to 24 hours) sends a redacted ID to a human agent. “The results of the ID verification check (i.e., successful or not) are saved until 90 days after your account is closed (or 1 year if the account is banned).” and “We also keep the photo and date of birth from your ID for the lifetime of your account”.

Vinted’s page accepts, if it shows full name and date of birth: “Identity or residence card; Passport; Driving licence; Student ID card; Social or health insurance card; Public transport pass; Bank statement; Any other document that confirms your full name and date of birth.” “For your privacy, please make sure to hide unrelated personal information (such as ID numbers, photos, or addresses) from your documents. We only need to be able to see your full name and date of birth.” “Your data is always handled in line with our Privacy Policy and is only requested when necessary.” Vinted’s privacy policy (last updated 19 June 2026) sets periods for other documents, not for age documents: “Any documents you send to confirm account ownership are kept for 3 days.” and, of payment providers’ identity checks, “We don’t store the KYC documents you provide.” No retention period for an age-verification document is published, so the absence line applies.

X's own page: “Users can submit a government-issued ID, which will be used to estimate their age by artificial intelligence systems.” X's own page names no vendor and gives no retention period. Press in July 2025 reported Persona and Au10tix deleting ID images, selfies and extracted data after 30 days, and named Stripe; X does not publish this.

Listed as “uploading a document” on Microsoft’s age-assurance FAQ (24 August 2026); the FAQ does not say which partner handles it for UK accounts.

Microsoft’s current account FAQ (24 August 2026): “Multiple age assurance options are available, provided by our partners Yoti and VerifyMe and include facial age estimation, and uploading a document.” The July 2025 Xbox Wire announcement said information “is protected with industry-standard encryption and is not stored or used for any other purpose.” Microsoft does not say which partner handles which method or region.

Google’s page lists for an uploaded ID: “Is stored securely”, “Won’t be made public”, “Will be deleted after your date of birth is successfully verified.” and “In certain cases, your ID may be subject to manual review in accordance with Google security policies.”