The policy discloses that in certain jurisdictions, Grindr may require users to submit a video selfie or pair a video selfie with an official photo ID for age verification purposes, and explicitly states this process involves processing biometric information.
This analysis describes what Grindr's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric information is among the most sensitive categories of personal data; its processing for age verification means some users must submit it as a condition of confirming eligibility to use the service.
Interpretive note: The age threshold (18) is stated in the excerpt but is secondary to the primary proposition about biometric processing; it is noted in omitted_material.
Under these terms, users in certain (unspecified) jurisdictions may be required to submit biometric information via video selfie and official photo ID as a condition of account creation; the policy does not enumerate which jurisdictions require this or specify the retention period for biometric data collected in this context.
How other platforms handle this
As you interact with our Website, we may automatically collect Technical Data and Usage Data about your equipment, browsing actions and patterns...by using cookies, server logs and other similar technologies.
NIM container releases that collect data, collect it for the following purposes: (a) to properly configure and optimize products for use with Software; and (b) to improve NVIDIA products and services.
Some of our ad partners may also enable us to collect similar data directly from their website or app by integrating our or our affiliates' advertising technology.
Monitoring
Grindr has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"In certain jurisdictions, we may require you to provide a video selfie or pair a video selfie with an official photo ID to confirm you are 18 years of age or older. This will involve processing your biometric information.— Excerpt from Grindr's Grindr Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages the Illinois Biometric Information Privacy Act (BIPA), which imposes written consent, retention schedule, and destruction requirements for biometric identifiers and biometric information collected from Illinois residents. Texas and Washington have analogous biometric data laws. GDPR Article 9 classifies biometric data processed for the purpose of uniquely identifying a natural person as special-category data requiring explicit consent or another Article 9(2) condition. The FTC has taken enforcement action regarding deceptive biometric data practices. Relevant enforcement authorities include state attorneys general in Illinois, Texas, and Washington, and EU member state DPAs. 2. GOVERNANCE EXPOSURE: High. Biometric data collection for age verification creates jurisdiction-specific statutory obligations under BIPA and equivalent state laws, including requirements for a publicly available written retention and destruction policy, written consent prior to collection, and prohibition on sale of biometric data. The policy does not enumerate the jurisdictions where biometric collection occurs or specify a retention period for biometric data, which may create BIPA compliance gaps if Illinois residents are among the affected population. 3. JURISDICTION FLAGS: Illinois (BIPA) creates the highest exposure given its statutory private right of action and liquidated damages provisions. Texas and Washington biometric privacy laws impose similar obligations. EU/EEA creates exposure under GDPR Article 9 for biometric processing. The policy's reference to 'certain jurisdictions' without enumeration creates ambiguity about the geographic scope of biometric data collection. 4. CONTRACT AND VENDOR IMPLICATIONS: If biometric processing for age verification is performed by a third-party vendor (such as an age assurance provider), the data processing agreement must address BIPA compliance obligations including consent, retention, destruction, and prohibition on sale or disclosure. Vendor assessments should verify biometric data handling practices and storage locations. 5. COMPLIANCE CONSIDERATIONS: Legal teams should identify the specific jurisdictions where video selfie age verification is deployed and confirm that jurisdiction-specific biometric data statutes are satisfied, including BIPA written consent and retention schedule requirements. A publicly available biometric data retention and destruction policy should be confirmed as established where required. Data mapping should document biometric data flows to any third-party age verification providers.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 3 platforms + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Biometric information is among the most sensitive categories of personal data; its processing for age verification means some users must submit it as a condition of confirming eligibility to use the service.
Under these terms, users in certain (unspecified) jurisdictions may be required to submit biometric information via video selfie and official photo ID as a condition of account creation; the policy does not enumerate which jurisdictions require this or specify the retention period for biometric data collected in this context.
ConductAtlas has identified this type of provision across 298 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grindr.