What happens to your ID when you verify your age?
When a UK service asks for a photo ID or a selfie, the check is usually run by a third-party vendor rather than the service itself. What that vendor says it keeps, and for how long, is published in some cases and simply not published in others. This page quotes what exists and states plainly where nothing does.
Short answer. Across 48 services there are 107 separate check routes in this index. 59 of them have retention wording we could quote from a published source; 48 have none. Of the 10 vendors, 2 have a recorded statement about image deletion after a check; its scope may be limited to a particular deployment. Where the holder is named, the vendor holds the data on 33 routes and the service itself on 19; on 52 routes it is not stated who holds it.
What each vendor publishes
Ordered by how many services in the index use them. A quote is the vendor's own wording, not a summary of it.
| Vendor | Used by | Its own retention wording | Images | Checked |
|---|---|---|---|---|
| Yoti GB |
9 services |
Scope not independently classified; check the source before applying this statement to a service. Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party. yoti.com checked 18 October 2026 Stated period: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner |
Does not say | 18 October 2026 |
| Epic Kids Web Services GB |
4 services |
Scope not independently classified; check the source before applying this statement to a service. Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your hashed email address. kidswebservices.com checked 18 October 2026 Stated period: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card) |
Does not say | 18 October 2026 |
| k-ID SG |
4 services |
Scope not independently classified; check the source before applying this statement to a service. Regardless of which provider you choose to perform age assurance, we at k-ID do NOT store the information that you provide to prove your age. All we store is the result of the verification process (i.e., whether you passed or failed). k-id.com checked 18 October 2026 Stated period: On-device facial estimation; images never uploaded |
Does not say | 18 October 2026 |
| Persona US |
4 services |
Applies only to Reddit. Not a vendor-wide default. Persona deletes all of your personal information, including any images if collected, immediately after the verification process ends. help.withpersona.com checked 18 October 2026 Stated period: Immediately after the verification process ends (Reddit deployment only) |
Does not say | 18 October 2026 |
| Google (age inference and Google Account verification) US |
3 services |
Scope not independently classified; check the source before applying this statement to a service. When age estimation is complete, Private ID shares with Google if they can confirm you’re old enough. Your selfie is then deleted. support.google.com checked 18 October 2026 Stated period: Selfie deleted after estimation (Private ID); uploaded ID “Will be deleted after your date of birth is successfully verified.”; card data retained “as necessary to meet legal and regulatory requirements” |
Says images are deleted after the check | 18 October 2026 |
| VerifyMy GB |
3 services |
Applies only to YouTube. Not a vendor-wide default. We and our partners will delete your personal data immediately as soon as the Check is complete and the result has been shared with Google. verifymy.io checked 18 October 2026 Stated period: immediately (email-based estimation for Google) |
Does not say | 18 October 2026 |
| Apple (device-level age check and Declared Age Range API) US |
2 services |
Applies only to Apple devices (UK account age confirmation). Not a vendor-wide default. kept for a short period of time support.apple.com checked 6 September 2026 Stated period: ID image only; duration unspecified, followed by deletion |
Says images are deleted after the check | 6 September 2026 |
| Ondato LT |
1 service |
Scope not independently classified; check the source before applying this statement to a service. Yes. OnAge uses facial analysis and age estimation for accuracy, but it deletes biometric data instantly. Only the result — “old enough” or “not old enough” — remains. ondato.com checked 18 October 2026 Stated period: instantly (OnAge) |
Does not say | 18 October 2026 |
| OneID GB |
0 services |
Scope not independently classified; check the source before applying this statement to a service. No long-term personal data retention oneid.uk checked 18 October 2026 Stated period: not stated |
Does not say | 18 October 2026 |
| Veratad US |
0 services |
Scope not independently classified; check the source before applying this statement to a service. Upon completion of a verification transaction, Veratad does not retain full underlying identity data as part of a persistent consumer profile. Veratad may retain limited information (such as transaction logs, security records, document images where applicable, and fraud or abuse prevention signals) where necessary to operate, secure, and support the Client Services, including certain Veratad-operated verification components, and in accordance with contractual, legal, and regulatory requirements. veratad.com checked 18 October 2026 Stated period: No fixed period; document images may be kept “where applicable”; biometric identifiers destroyed “once the purposes for which collecting or maintaining such information has been satisfied” (state-specific periods for Illinois, Texas and Washington residents) |
Does not say | 18 October 2026 |
Routes where no retention period is published
48 of the 107 check routes in the index have no published retention wording that we could find and quote. That is not a claim that nothing is deleted — it is a statement that the service and the vendor have not said, as at the date shown.
| Service | Route | Vendor named | Checked |
|---|---|---|---|
| Apple devices (UK account age confirmation) | In-house age inference | Apple | 18 October 2026 |
| Bluesky | Credit card | Epic Kids Web Services | 18 October 2026 |
| Bluesky | Photo ID | Epic Kids Web Services (Veriff) | 18 October 2026 |
| Bluesky | Facial age estimation (face scan) | Epic Kids Web Services (Yoti) | 18 October 2026 |
| Character.AI | In-house age inference | none named | 18 October 2026 |
| ChatGPT (OpenAI) | In-house age inference | none named | 18 October 2026 |
| Crunchyroll | Self-declaration | Crunchyroll account settings (in-house) | 18 October 2026 |
| Depop | Self-declaration | Depop account sign-up (in-house) | 18 October 2026 |
| Depop | Photo ID | Depop support (date-of-birth corrections) | 18 October 2026 |
| Depop | Photo ID | Depop Payments verification (Stripe) | 18 October 2026 |
| Discord | Other method | Apple App Store or Google Play Store age range | 18 October 2026 |
| EA (Electronic Arts) | Photo ID | Not named on EA’s age-check page (failed checks are referred to the KWS support page) | 18 October 2026 |
| EA (Electronic Arts) | Facial age estimation (face scan) | Not named on EA’s age-check page (failed checks are referred to the KWS support page) | 18 October 2026 |
| eBay | Other method | VerifyMyAge (VerifyMy) | 18 October 2026 |
| Epic Games and Fortnite | Photo ID | Epic Kids Web Services (Veriff) | 18 October 2026 |
| Epic Games and Fortnite | Facial age estimation (face scan) | Epic Kids Web Services (Yoti) | 18 October 2026 |
| In-house age inference | Meta (in-house) | 18 October 2026 | |
| Google Account and Google Search | In-house age inference | Google (own systems) | 18 October 2026 |
| Google Account and Google Search | Digital ID wallet | Google (digital ID in a wallet on the device) | 18 October 2026 |
| In-house age inference | Meta (in-house) | 18 October 2026 | |
| OnlyFans | Photo ID | Ondato | 18 October 2026 |
| OnlyFans | Facial age estimation (face scan) | Yoti | 18 October 2026 |
| Facial age estimation (face scan) | none named | 18 October 2026 | |
| Photo ID | none named | 18 October 2026 | |
| PlayStation | Mobile operator check | Yoti | 18 October 2026 |
| PlayStation | Photo ID | Yoti | 18 October 2026 |
| Pornhub, YouPorn, RedTube (Aylo) | Email-based estimation | Aylo in-house and third parties | 18 October 2026 |
| Pornhub, YouPorn, RedTube (Aylo) | Credit card | Aylo | 18 October 2026 |
| Pornhub, YouPorn, RedTube (Aylo) | Mobile operator check | Aylo | 18 October 2026 |
| Pornhub, YouPorn, RedTube (Aylo) | Open banking | Aylo | 18 October 2026 |
| Pornhub, YouPorn, RedTube (Aylo) | Other method | Apple device check (iOS only) | 18 October 2026 |
| Other method | Apple or Google app-store age range | 18 October 2026 | |
| In-house age inference | none named | 18 October 2026 | |
| Replika | Self-declaration | Replika account sign-up (in-house) | 18 October 2026 |
| Replika | In-house age inference | none named | 18 October 2026 |
| Riot Games | Photo ID | Kids Web Services (KWS) | 18 October 2026 |
| Steam | Credit card | Valve (in-house) | 18 October 2026 |
| Telegram | Facial age estimation (face scan) | Telegram in-house (official bot) | 6 September 2026 |
| Threads | Photo ID | Yoti | 18 October 2026 |
| Tumblr | Open banking | k-ID (ConnectID) | 18 October 2026 |
| Vinted | Photo ID | Vinted Customer Support (in-house) | 18 October 2026 |
| X (Twitter) and Grok | Facial age estimation (face scan) | none named | 18 October 2026 |
| X (Twitter) and Grok | Photo ID | none named | 18 October 2026 |
| X (Twitter) and Grok | Email-based estimation | not named | 18 October 2026 |
| X (Twitter) and Grok | In-house age inference | none named | 18 October 2026 |
| Xbox | Mobile operator check | Yoti (attribution from the September 2026 record, not confirmed by Microsoft) | 18 October 2026 |
| Xbox | Credit card | Yoti (attribution from the September 2026 record, not confirmed by Microsoft) | 18 October 2026 |
| YouTube | Digital ID wallet | Google (digital ID in a wallet on the device) | 18 October 2026 |
Why the same vendor can keep data for different lengths of time
Retention wording may refer to different services, data types or exceptions. Provider profiles label the scope of their sources; service pages show the statements recorded for that deployment. Different periods do not automatically indicate a contradiction.
What this page is not
It is not a safety rating, and there are deliberately no scores here. A published retention period is evidence of a published retention period — not proof of what happens to a file in practice. It is also not legal advice. What it does give you is the actual wording, the source it came from and the date someone last read it, so you can check it yourself.
Per-service detail is on each index row; per-vendor detail, including certifications, accuracy claims and any regulator actions or reported incidents, is on the vendor pages. Related: why services started asking and what the check looks like on each service.
This directory publishes information about companies, not individuals. It does not process personal data of people who verify their age.