Epic Kids Web Services
Kids Web Services Ltd (Epic Games), headquartered in GB. Website: kidswebservices.com. Methods offered: facial age estimation (face scan), photo id, credit card, parental consent.
verified 18 October 2026
Retention, as published by Epic Kids Web Services
Scope not independently classified; check the source before applying this statement to a service.
“Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your hashed email address.”
Quoted from kidswebservices.com, dated 10 September 2026; checked 18 October 2026. Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card).
Retention statements by service
Statements may cover different services, data types, dates or exceptions. Different periods are not necessarily contradictory. A statement for one service is not a default for another.
| Deployment | Method | What the deployment states | Provider statement and scope |
|---|---|---|---|
| Bluesky | Credit card Primary source |
No published retention period found (checked 18 October 2026). Notes: Bluesky’s post names “credit card verification and face scans” through Epic Games’ Kids Web Services and gives no retention line. KWS’s own developer page: “Stripe (stripe.com) verifies credit card details.” and, for the UK, “KWS authorizes a £0.05 charge” that is not withdrawn. Debit cards are listed as unavailable in the United Kingdom. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Bluesky | Photo ID Primary source |
No published retention period found (checked 18 October 2026). Notes: Bluesky’s own post names only credit card and face scans. KWS’s developer page lists the ID route: “A user in all regions, except the Republic of Korea, can verify their age by scanning the front and back of their government-issued identification (ID) documentation.”, “In the United Kingdom, users will also be required to take a selfie to confirm their identity matches their ID documentation.” and “Veriff (veriff.com) verifies scanned ID documentation.” Whether Bluesky offers this route to UK users is not stated by Bluesky. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Bluesky | Facial age estimation (face scan) Primary source |
No published retention period found (checked 18 October 2026). Notes: Bluesky’s post names face scans through KWS. KWS’s developer page: “KWS prompts the user to hold their device’s camera in front of their face, and a machine-learning algorithm estimates their age.” and “Yoti (yoti.com) provides face scan verification.” Face scan is listed as unavailable in the United States and the Republic of Korea. Press (Biometric Update, July 2025) also reported Yoti inside KWS. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| EA | Parental consent Primary source |
“Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your hashed email address.” Quoted from kidswebservices.com, dated 10 September 2026; checked 18 October 2026. Held by the vendor. Period as stated: Verified status kept against a hashed email address; KWS: “we never store the verification details (e.g. your card details) themselves”; other personal information “for as long as necessary to fulfil the purposes we collected it for”. Notes: EA’s child-account page: the parent enters an email in the “Parent or Guardian Email Address” field, then “You’ll get an email asking you to confirm you’re an adult. To proceed, select Yes, I’m an adult to complete the verification process. If verification isn’t completed within 10 days of beginning the child account creation process, the verification link will expire, and you’ll have to create the child account again.” For accounts created before 28 June 2024: “Select Yes, I’m an adult in the email. You’ll be taken to our trusted partner Kids Web Services (KWS). Complete the verification process.” EA’s page does not list the methods KWS offers the parent. The retention quotation is from KWS’s own privacy policy (last updated 10 September 2026), not an EA page. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Epic Games and Fortnite | Parental consent Primary source |
“Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your hashed email address.” Quoted from kidswebservices.com, dated 10 September 2026; checked 18 October 2026. Held by the vendor. Period as stated: Verified status kept against a hashed email address; KWS: “we never store the verification details (e.g. your card details) themselves”; other personal information “for as long as necessary to fulfil the purposes we collected it for”. Notes: Epic’s Parental Verification FAQ: a parent or guardian emailed by Epic reviews Epic’s privacy practices, sets the account’s parental controls and may be asked to “verify that you are an adult”. Epic’s Cabined Accounts FAQ: the player “won’t be able to access certain content or features until their parent or guardian provides consent” or “when they reach age 13 (or the age of digital consent in their region)”. Kids Web Services Ltd is named by Epic as “our subsidiary”. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Epic Games and Fortnite | Credit card Primary source |
“the method of verification used, e.g. ‘individual verified by payment card using Stripe’, but we never store the verification details (e.g. your card details) themselves” Quoted from kidswebservices.com, dated 10 September 2026; checked 18 October 2026. Held by the vendor. Period as stated: Card details not stored by KWS; verified status kept against a hashed email address. Notes: Epic’s Parental Verification FAQ: “placing an authorization or small refundable charge on a credit card”. Kids Web Services’ developer page: “Stripe (stripe.com) verifies credit card details.” and “For users outside the United States, KWS authorizes a small charge in the local currency but does not withdraw the money from their credit card. For example, KWS authorizes a £0.05 charge for users in the United Kingdom.” Debit cards: “Worldwide except in Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine, and the United Kingdom.” |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Epic Games and Fortnite | Photo ID Primary source |
No published retention period found (checked 18 October 2026). Notes: Kids Web Services’ developer page: “A user in all regions, except the Republic of Korea, can verify their age by scanning the front and back of their government-issued identification (ID) documentation.” “In the United Kingdom, users will also be required to take a selfie to confirm their identity matches their ID documentation.” “Veriff (veriff.com) verifies scanned ID documentation.” KWS’s privacy policy: “if you select ID Scan & Selfie as the method to verify your age, we will uniquely identify your image against your selected ID, which may be considered biometric data.” No deletion period for the ID or selfie is published by Epic or KWS. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Epic Games and Fortnite | Facial age estimation (face scan) Primary source |
No published retention period found (checked 18 October 2026). Notes: Kids Web Services’ developer page: “Face scan is available worldwide, except in the United States and the Republic of Korea.” “KWS prompts the user to hold their device’s camera in front of their face, and a machine-learning algorithm estimates their age.” “Yoti (yoti.com) provides face scan verification.” Epic’s Australia page says of the same route: “This photo is encrypted, never seen by a human and is deleted by Yoti immediately after estimation. KWS does not receive your selfie.” That statement is made for Australia; no UK equivalent was found, so no retention is recorded here. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Riot Games | Parental consent Primary source |
“Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your hashed email address.” Quoted from kidswebservices.com, dated 10 September 2026; checked 18 October 2026. Held by the vendor. Period as stated: Verified status kept against a hashed email address; KWS: “we never store the verification details (e.g. your card details) themselves”; other personal information “for as long as necessary to fulfil the purposes we collected it for”. Notes: Riot: “For parents/guardians in particular, the link sent to you via email will bring you to the Parent Portal to begin the parent verification and approval process.” “Once verified, you'll be prompted to read and accept our Terms of Use and Privacy Notice as a last step.” The Parent Portal then offers game access, friends list, chat, message history, playtime and purchase limits (the last two “Does not apply to the US”). The retention quotation is from KWS’s own privacy policy (last updated 10 September 2026); Riot’s own words are “Riot doesn't store or access any of this personal information, it's only used by KWS to confirm you're an adult.” |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Riot Games | Credit card Primary source |
“the method of verification used, e.g. ‘individual verified by payment card using Stripe’, but we never store the verification details (e.g. your card details) themselves” Quoted from kidswebservices.com, dated 10 September 2026; checked 18 October 2026. Held by the vendor. Period as stated: Card details not stored by KWS; verified status kept against a hashed email address. Notes: Riot: “To prove that you are an adult, you must submit information like a credit card or government ID that will be processed through Kids Web Services (KWS), a third-party service.” Riot’s page does not state whether a charge or authorisation is made. The retention quotation is from KWS’s own privacy policy, not a Riot page. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
| Riot Games | Photo ID Primary source |
No published retention period found (checked 18 October 2026). Notes: Riot: “a credit card or government ID that will be processed through Kids Web Services (KWS)”; “Riot doesn't store or access any of this personal information, it's only used by KWS to confirm you're an adult. For more information on that process and to learn more about how they handle your information, check KWS' Privacy Policy.” Neither Riot’s page nor KWS’s privacy policy publishes a deletion period for ID images, so the absence line applies. |
Scope not independently classified; check the source before applying this statement to a service. “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your…”Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) checked 18 October 2026 |
Reported customers
- Bluesky 10 July 2025 bsky.social
- Epic Games and Fortnite epicgames.com
- EA 20 November 2025 help.ea.com
- Riot Games 31 May 2026 support.riotgames.com
Certifications
No certification recorded as of 18 October 2026. This does not establish that the provider is uncertified.
The UK Age Check Certification Scheme (ACCS) registry lists certificates with their expiry dates; a certificate that has lapsed is recorded as such once the registry shows it.
Regulator actions and published incidents
No regulator action or published incident recorded as of 18 October 2026.
Questions people ask about Epic Kids Web Services
What does Epic Kids Web Services say it keeps?
Scope not independently classified; check the source before applying this statement to a service. "Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your hashed email address." (kidswebservices.com, dated 10 September 2026; checked 18 October 2026). Period as stated: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card). See each service’s own statement; scope, data type and exceptions may differ.
Is Epic Kids Web Services certified?
No certification is recorded for this vendor as of 18 October 2026. ACCS registry status is still being verified.
Has Epic Kids Web Services been fined or had a data incident?
No regulator action or published incident is recorded as of 18 October 2026. This site does not rate vendors; it records what regulators and the vendor have published.
Which UK services use Epic Kids Web Services?
Recorded deployments: Bluesky, EA (Electronic Arts), Epic Games and Fortnite and Riot Games.
Sources for this profile
- KWS verification methods
- Kids Web Services privacy policy (last updated 10 September 2026) 10 September 2026
- Epic Games Support: Parental Verification FAQ (“our subsidiary Kids Web Services Ltd”)
- EA Help: Create a child account (“our trusted partner Kids Web Services (KWS)”; updated 20 November 2025) 20 November 2025
- Riot Games Support: Age Verification (“processed through Kids Web Services (KWS), a third-party service”; 31 May 2026) 31 May 2026
Changes to this profile
- — known_customers, sources: EA and Riot Games added as deployments from their own pages (read 18 October 2026). EA’s child-account page: a parent confirming they are an adult is “taken to our trusted partner Kids Web Services (KWS)”. Riot’s Age Verification page: a credit card or government ID “will be processed through Kids Web Services (KWS), a third-party service. Don't worry—Riot doesn't store or access any of this personal information, it's only used by KWS to confirm you're an adult.” Neither page states what KWS keeps for that deployment; the KWS privacy policy of 10 September 2026 is quoted on the service rows. manual
- — known_customers, sources: Epic Games and Fortnite added as a deployment from Epic’s own pages (read 18 October 2026): the Parental Verification FAQ says a parent may have to verify they are an adult by “placing an authorization or small refundable charge on a credit card, or checking some of your information against a public records database” and that adults “already … verified … through our subsidiary Kids Web Services Ltd” are not asked again. KWS’s developer page lists credit card (£0.05 authorisation), ID scan with a selfie and face scan as available in the UK. manual
- — retention, sources, open_questions: KWS privacy policy re-read 18 October 2026 (last updated 10 September 2026): quote made verbatim; the policy also says KWS records the method used “but we never store the verification details (e.g. your card details) themselves”. KWS developer page re-read: credit card (Stripe), ID scan (Veriff, with a selfie in the UK) and face scan (Yoti) available in the UK; debit cards not. (was: stores verified status with your hashed email address; retains for as long as necessary to fulfil the purposes) manual
Correct this entry
Vendors are welcome to correct their profile. Point us at the policy page and the wording is replaced with the quotation, dated. Send a correction. Nothing you send is published.