In some jurisdictions, Bluesky may require you to verify your age using methods including uploading a government ID or a facial scan; Bluesky states it does not retain biometric data itself, but this data is processed by third-party vendors.
This analysis describes what Bluesky's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Facial scans and government ID images are among the most sensitive categories of personal data, and while Bluesky states it does not retain this data, the processing occurs through third-party vendors whose own retention and handling practices are governed by their separate privacy policies.
Interpretive note: The specific third-party vendors used for age verification are not named in the policy, and their independent data retention and processing practices are unknown from this document alone.
Users in jurisdictions where age verification is required may need to submit a facial scan or government-issued ID to a third-party service to access certain Bluesky features; the policy states Bluesky does not retain this biometric data, but users should review the relevant third-party vendor's privacy policy for their own retention and use practices.
How other platforms handle this
To protect your privacy, we will take steps to verify your identity before fulfilling your request, such as by requiring you to submit your request via your account.
we may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
"Third Party Age or Identity Verification. Where required by law, Bluesky may use third-party services to verify that you are old enough to access certain features or content. This verification may involve one or more of the following methods, depending on your jurisdiction and availability: Government ID Verification: Uploading an image of a government-issued ID, which is checked for authenticity. Facial Age Estimation: Uploading a selfie or real-time facial scan used to estimate age via machine learning technology. You will be able to choose from among available jurisdiction-specific options based on your preference. We do not retain any biometric data or facial images provided to third-party age verification vendors.Excerpt from Bluesky's Privacy Policy
(1) REGULATORY LANDSCAPE: Facial age estimation and government ID processing constitute special category or sensitive data processing under GDPR Article 9 and equivalent provisions in UK GDPR, Brazil's LGPD, and Illinois BIPA.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Facial scans and government ID images are among the most sensitive categories of personal data, and while Bluesky states it does not retain this data, the processing occurs through third-party vendors whose own retention and handling practices are governed by their separate privacy policies.
Users in jurisdictions where age verification is required may need to submit a facial scan or government-issued ID to a third-party service to access certain Bluesky features; the policy states Bluesky does not retain this biometric data, but users should review the relevant third-party vendor's privacy policy for their own retention and use practices.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bluesky.