DEV Community

Ronny Cruz
Ronny Cruz

Posted on

Privacy-Preserving Age Assurance: Prove What Matters Without Collecting Everything

The core problem

Platforms need enough information to make age-appropriate decisions, but collecting more
personal information can itself create risk. The objective should be to establish the minimum fact
required for the decision.
Privacy as a design requirement
Instead of asking how to collect someone's identity, ask what fact the application actually needs.
The application may need to know that an age threshold has been satisfied rather than retaining a
complete identity record.
Separate proof from identity
Candor's privacy-oriented approach minimizes personal information retained by the platform.
Conceptually: age assurance process -> required condition established -> assurance result ->
application decision.
Gaming context
Games often serve mixed-age populations. A platform may need to determine whether a player is
a minor, which communications are permitted, whether parental authorization is required and
whether additional safeguards should apply.
Related concepts
Gaming Trust & Safety Infrastructure; Parental Consent Without Identity-Document Storage.
DON'T TRUST US. VERIFY US.
Test the system, inspect the architecture, and decide whether it belongs in your safety
stack.
candortrustandsafety.com

Top comments (0)