Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Jun 16, 2026; our capture on Oct 21, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“Our Services are strictly intended for individuals 18 years of age or older. Anyone under 18 years of age is not permitted to use the Services. By using the Services, you represent that you are 18 years of age or older.”
“if you are based in the U.S., we may use background screening providers to determine whether you have a serious criminal conviction (including if you appear on a sex offenders registry). We may use your full name and date of birth...”
“Check that you have not previously been banned from using OnlyFans and our Services (e.g. for violating our Terms of Service).”
“Face Recognition Data is collected by and remains with our third-party provider. We do not ourselves collect, receive, possess, or have access to Face Recognition Data at any time.”
“Ask you to go through a third-party process to gain further assurances of your age. This may include a third-party age and identity verification process, or third-party age estimation process, as described below.”
“we do not sell Personal Data collected about you, or share Personal Data collected about you for cross-context behavioural advertising.”
This document explains how OnlyFans handles your personal information: what it collects, who it shares it with, and what rights you have. OnlyFans does not sell your data or use it for cross-site targeted advertising. If you are based in the U.S., OnlyFans may run a criminal background check on you using a third-party provider, and declining to provide requested personal data may limit or block your access to the platform.
This privacy policy establishes OnlyFans' data collection, processing, sharing, and retention practices, along with the rights available to users regarding their personal data. The policy sets a hard age threshold of 18 or older for all users and permits OnlyFans to conduct third-party criminal background checks on U.S.-based users using full name and date of birth. OnlyFans explicitly prohibits selling personal data or sharing it for cross-context behavioural advertising, and it does not engage in solely automated decision-making with legal or similarly significant effects on users. Cross-border data transfers are limited to three defined legal bases: adequacy decisions, appropriate safeguards, or authorisation by applicable law. Face Recognition Data is held exclusively by a third-party provider and never collected, received, possessed, or accessed by OnlyFans itself.
As a user, your personal data will not be sold or shared for cross-context behavioural advertising, and no consequential decisions about you will be made by automated systems alone. If you are in the U.S., OnlyFans may share your full name and date of birth with a third-party screening provider to check for serious criminal convictions. Your right to have your personal data deleted is not absolute and may be limited where, for example, your account was deactivated for Terms of Service violations. If you have undergone face recognition verification, you can withdraw consent to retention of that biometric data for authentication by contacting privacy@onlyfans.com.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“Our Services are strictly intended for individuals 18 years of age or older. Anyone under 18 years of age is not permitted to use the Services. By using the Services, you represent that you are 18 years of age or …”
“if you are based in the U.S., we may use background screening providers to determine whether you have a serious criminal conviction (including if you appear on a sex offenders registry). We may use your full name and date of …”
“Check that you have not previously been banned from using OnlyFans and our Services (e.g. for violating our Terms of Service).”
“Face Recognition Data is collected by and remains with our third-party provider. We do not ourselves collect, receive, possess, or have access to Face Recognition Data at any time.”
“Ask you to go through a third-party process to gain further assurances of your age. This may include a third-party age and identity verification process, or third-party age estimation process, as described below.”
“we do not sell Personal Data collected about you, or share Personal Data collected about you for cross-context behavioural advertising.”
“We do not sell or share Personal Data for the purpose of displaying advertisements that are selected based on Personal Data obtained or inferred over time from an individual's activities across businesses or distinctly-branded websites...”
“We do not process Personal Data that is subject to solely automated decision-making, where that decision-making is likely to have a legal or similarly significant effect on you.”
“Request deletion / erasure of your Personal Data... Please note that we may not always be able to comply with your request of deletion / erasure for specific legal reasons, for example if your account has been deactivated for violations …”
“if you do not wish to provide Personal Data where requested, we may not be able to provide you with access to the Services or specific features and functionalities of the Services.”
“You may request the withdrawal of your consent to the retention of your Face Recognition Data for the purposes of subsequent authentication (and delete this) by contacting privacy@onlyfans.com.”
“We make those transfers: (i) to countries that have been deemed to provide an adequate level of protection for Personal Data; (ii) using appropriate safeguards; or (iii) where otherwise authorised by applicable law.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle 18-Plus Age Requirement for Services and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.