This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Spotify collects biometric and identity document data—among the most sensitive categories of personal data—as part of age verification, making the scope and handling of such data highly consequential.
Interpretive note: The excerpt references facial age estimation as a separate mechanism but the sentence is incomplete as quoted; the primary claim covers the explicitly stated methods. The facial age estimation use is noted in omitted_material.
To complete an Age Check, you are required to provide a photo of your identity document, and in some cases a photo of your face, which Spotify processes to verify your age.
How other platforms handle this
We may attempt to verify your employment history or status through various methods, including third-party integrations or services. We may also utilize signals we may receive from your current or former employer.
You may give us your Identity Data, Contact Data, Financial Data, Profile Data, and other information by filling in forms or by corresponding with us by post, phone, e-mail or otherwise.
telemetry information collected includes: (i) microservice settings, (ii) usage data and (iii) hardware environment.
"identity document verification: a photo of your identity document is used to confirm your age. In some cases, we may also use a photo of your face to verify that your ID belongs to you facial age estimation: a photo of your face...Excerpt from Spotify's Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Spotify collects biometric and identity document data—among the most sensitive categories of personal data—as part of age verification, making the scope and handling of such data highly consequential.
To complete an Age Check, you are required to provide a photo of your identity document, and in some cases a photo of your face, which Spotify processes to verify your age.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.