UK Age Check Index

What happens to your ID when you verify your age?

When a UK service asks for a photo ID or a selfie, the check is usually run by a third-party vendor rather than the service itself. What that vendor says it keeps, and for how long, is published in some cases and simply not published in others. This page quotes what exists and states plainly where nothing does.

Short answer. Across 48 services there are 107 separate check routes in this index. 59 of them have retention wording we could quote from a published source; 48 have none. Of the 10 vendors, 2 have a recorded statement about image deletion after a check; its scope may be limited to a particular deployment. Where the holder is named, the vendor holds the data on 33 routes and the service itself on 19; on 52 routes it is not stated who holds it.

What each vendor publishes

Ordered by how many services in the index use them. A quote is the vendor's own wording, not a summary of it.

VendorUsed byIts own retention wordingImagesChecked
Yoti
GB
9 services

Scope not independently classified; check the source before applying this statement to a service.

Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party. yoti.com checked 18 October 2026

Stated period: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner

Does not say 18 October 2026
Epic Kids Web Services
GB
4 services

Scope not independently classified; check the source before applying this statement to a service.

Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store your verified status alongside your hashed email address. kidswebservices.com checked 18 October 2026

Stated period: Verified status kept against a hashed email; verification details (such as card details) never stored by KWS; other personal information kept “for as long as necessary to fulfil the purposes we collected it for”; image handling delegated to Yoti (face), Veriff (ID) and Stripe (card)

Does not say 18 October 2026
k-ID
SG
4 services

Scope not independently classified; check the source before applying this statement to a service.

Regardless of which provider you choose to perform age assurance, we at k-ID do NOT store the information that you provide to prove your age. All we store is the result of the verification process (i.e., whether you passed or failed). k-id.com checked 18 October 2026

Stated period: On-device facial estimation; images never uploaded

Does not say 18 October 2026
Persona
US
4 services

Applies only to Reddit. Not a vendor-wide default.

Persona deletes all of your personal information, including any images if collected, immediately after the verification process ends. help.withpersona.com checked 18 October 2026

Stated period: Immediately after the verification process ends (Reddit deployment only)

Does not say 18 October 2026
Google (age inference and Google Account verification)
US
3 services

Scope not independently classified; check the source before applying this statement to a service.

When age estimation is complete, Private ID shares with Google if they can confirm you’re old enough. Your selfie is then deleted. support.google.com checked 18 October 2026

Stated period: Selfie deleted after estimation (Private ID); uploaded ID “Will be deleted after your date of birth is successfully verified.”; card data retained “as necessary to meet legal and regulatory requirements”

Says images are deleted after the check 18 October 2026
VerifyMy
GB
3 services

Applies only to YouTube. Not a vendor-wide default.

We and our partners will delete your personal data immediately as soon as the Check is complete and the result has been shared with Google. verifymy.io checked 18 October 2026

Stated period: immediately (email-based estimation for Google)

Does not say 18 October 2026
Apple (device-level age check and Declared Age Range API)
US
2 services

Applies only to Apple devices (UK account age confirmation). Not a vendor-wide default.

kept for a short period of time support.apple.com checked 6 September 2026

Stated period: ID image only; duration unspecified, followed by deletion

Says images are deleted after the check 6 September 2026
Ondato
LT
1 service

Scope not independently classified; check the source before applying this statement to a service.

Yes. OnAge uses facial analysis and age estimation for accuracy, but it deletes biometric data instantly. Only the result — “old enough” or “not old enough” — remains. ondato.com checked 18 October 2026

Stated period: instantly (OnAge)

Does not say 18 October 2026
OneID
GB
0 services

Scope not independently classified; check the source before applying this statement to a service.

No long-term personal data retention oneid.uk checked 18 October 2026

Stated period: not stated

Does not say 18 October 2026
Veratad
US
0 services

Scope not independently classified; check the source before applying this statement to a service.

Upon completion of a verification transaction, Veratad does not retain full underlying identity data as part of a persistent consumer profile. Veratad may retain limited information (such as transaction logs, security records, document images where applicable, and fraud or abuse prevention signals) where necessary to operate, secure, and support the Client Services, including certain Veratad-operated verification components, and in accordance with contractual, legal, and regulatory requirements. veratad.com checked 18 October 2026

Stated period: No fixed period; document images may be kept “where applicable”; biometric identifiers destroyed “once the purposes for which collecting or maintaining such information has been satisfied” (state-specific periods for Illinois, Texas and Washington residents)

Does not say 18 October 2026

Routes where no retention period is published

48 of the 107 check routes in the index have no published retention wording that we could find and quote. That is not a claim that nothing is deleted — it is a statement that the service and the vendor have not said, as at the date shown.

ServiceRouteVendor namedChecked
Apple devices (UK account age confirmation) In-house age inference Apple 18 October 2026
Bluesky Credit card Epic Kids Web Services 18 October 2026
Bluesky Photo ID Epic Kids Web Services (Veriff) 18 October 2026
Bluesky Facial age estimation (face scan) Epic Kids Web Services (Yoti) 18 October 2026
Character.AI In-house age inference none named 18 October 2026
ChatGPT (OpenAI) In-house age inference none named 18 October 2026
Crunchyroll Self-declaration Crunchyroll account settings (in-house) 18 October 2026
Depop Self-declaration Depop account sign-up (in-house) 18 October 2026
Depop Photo ID Depop support (date-of-birth corrections) 18 October 2026
Depop Photo ID Depop Payments verification (Stripe) 18 October 2026
Discord Other method Apple App Store or Google Play Store age range 18 October 2026
EA (Electronic Arts) Photo ID Not named on EA’s age-check page (failed checks are referred to the KWS support page) 18 October 2026
EA (Electronic Arts) Facial age estimation (face scan) Not named on EA’s age-check page (failed checks are referred to the KWS support page) 18 October 2026
eBay Other method VerifyMyAge (VerifyMy) 18 October 2026
Epic Games and Fortnite Photo ID Epic Kids Web Services (Veriff) 18 October 2026
Epic Games and Fortnite Facial age estimation (face scan) Epic Kids Web Services (Yoti) 18 October 2026
Facebook In-house age inference Meta (in-house) 18 October 2026
Google Account and Google Search In-house age inference Google (own systems) 18 October 2026
Google Account and Google Search Digital ID wallet Google (digital ID in a wallet on the device) 18 October 2026
Instagram In-house age inference Meta (in-house) 18 October 2026
OnlyFans Photo ID Ondato 18 October 2026
OnlyFans Facial age estimation (face scan) Yoti 18 October 2026
Pinterest Facial age estimation (face scan) none named 18 October 2026
Pinterest Photo ID none named 18 October 2026
PlayStation Mobile operator check Yoti 18 October 2026
PlayStation Photo ID Yoti 18 October 2026
Pornhub, YouPorn, RedTube (Aylo) Email-based estimation Aylo in-house and third parties 18 October 2026
Pornhub, YouPorn, RedTube (Aylo) Credit card Aylo 18 October 2026
Pornhub, YouPorn, RedTube (Aylo) Mobile operator check Aylo 18 October 2026
Pornhub, YouPorn, RedTube (Aylo) Open banking Aylo 18 October 2026
Pornhub, YouPorn, RedTube (Aylo) Other method Apple device check (iOS only) 18 October 2026
Reddit Other method Apple or Google app-store age range 18 October 2026
Reddit In-house age inference none named 18 October 2026
Replika Self-declaration Replika account sign-up (in-house) 18 October 2026
Replika In-house age inference none named 18 October 2026
Riot Games Photo ID Kids Web Services (KWS) 18 October 2026
Steam Credit card Valve (in-house) 18 October 2026
Telegram Facial age estimation (face scan) Telegram in-house (official bot) 6 September 2026
Threads Photo ID Yoti 18 October 2026
Tumblr Open banking k-ID (ConnectID) 18 October 2026
Vinted Photo ID Vinted Customer Support (in-house) 18 October 2026
X (Twitter) and Grok Facial age estimation (face scan) none named 18 October 2026
X (Twitter) and Grok Photo ID none named 18 October 2026
X (Twitter) and Grok Email-based estimation not named 18 October 2026
X (Twitter) and Grok In-house age inference none named 18 October 2026
Xbox Mobile operator check Yoti (attribution from the September 2026 record, not confirmed by Microsoft) 18 October 2026
Xbox Credit card Yoti (attribution from the September 2026 record, not confirmed by Microsoft) 18 October 2026
YouTube Digital ID wallet Google (digital ID in a wallet on the device) 18 October 2026

Why the same vendor can keep data for different lengths of time

Retention wording may refer to different services, data types or exceptions. Provider profiles label the scope of their sources; service pages show the statements recorded for that deployment. Different periods do not automatically indicate a contradiction.

What this page is not

It is not a safety rating, and there are deliberately no scores here. A published retention period is evidence of a published retention period — not proof of what happens to a file in practice. It is also not legal advice. What it does give you is the actual wording, the source it came from and the date someone last read it, so you can check it yourself.

Per-service detail is on each index row; per-vendor detail, including certifications, accuracy claims and any regulator actions or reported incidents, is on the vendor pages. Related: why services started asking and what the check looks like on each service.

This directory publishes information about companies, not individuals. It does not process personal data of people who verify their age.