Spotify · Spotify Privacy Policy · View original document ↗

Facial Age Estimation and Biometric Age Check

High severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Spotify Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The provision operationalizes Spotify's age verification procedures by defining the categories of biometric and identity data that may be processed, establishing the retention protocol (immediate deletion post-verification), and allocating consent and notice obligations between Spotify and third-party providers. This framework enables age-restricted access controls while establishing data minimization practices.

Clause Stability Stable

0
Changes
3
Months Monitored
Apr 4, 2026
First Seen
Apr 9, 2026
Last Seen
This clause type exists across 967 other provisions on other platforms.

Consumer impact (what this means for users)

Users who elect to use Age Check functionality authorize the collection of facial photographs and identity document images for age estimation and verification purposes. The terms specify that this data is deleted immediately following the verification process and that third-party provider policies will apply to the processing.

How other platforms handle this

Uber Medium

Background check information. This includes information submitted to Uber, or Uber service providers, during the Driver/Delivery Person application process. Criminal record (where permitted by law)* ... Running background, driving and criminal record (where permitted by law) checks to confirm your i...

Target Medium

Target reserves the right to change these Terms at any time. We will post notification of changes to these Terms on this page. Your continued use of the Target Services after any changes to these Terms constitutes your acceptance of the new Terms.

GitHub Medium

We reserve the right, at our sole discretion, to amend these Terms of Service at any time and will update these Terms of Service in the event of any such amendments. We will notify our Users of material changes to this Agreement, such as price changes, at least 30 days prior to the change taking eff...

See all platforms with this clause type →

Monitoring

Spotify has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Age Check Data is the data you provide if you use an Age Check powered by a third party provider on Spotify ('Age Check'). This includes: Facial age estimation: a photo of your face which is used to estimate your age; Identity document verification: photos of your face and ID which are used to confirm your age and to verify that the ID belongs to you. Where Age Check Data is collected, we will obtain your consent and provide notice of the third party policies that apply to the processing of such data. All Age Check Data is deleted immediately after the Age Check.

— Excerpt from Spotify's Spotify Privacy Policy

Applicable regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
COPPA
United States Federal
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Spotify Privacy Policy
Entity
Spotify
Document last updated
May 5, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 9, 2026
Record ID
CA-P-002173
Document ID
CA-D-00036
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
20e7378325f90f73de8e5f0d9b2d1ec4523f9cf07b406b492edd5753b96f24ad
Analysis generated
March 6, 2026 20:27 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Spotify
Document: Spotify Privacy Policy
Record ID: CA-P-002173
Captured: 2026-03-06 20:27:52 UTC
SHA-256: 20e7378325f90f73…
URL: https://conductatlas.com/platform/spotify/spotify-privacy-policy/facial-age-estimation-and-biometric-age-check/
Accessed: June 19, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Spotify's Facial Age Estimation and Biometric Age Check clause do?

The provision operationalizes Spotify's age verification procedures by defining the categories of biometric and identity data that may be processed, establishing the retention protocol (immediate deletion post-verification), and allocating consent and notice obligations between Spotify and third-party providers. This framework enables age-restricted access controls while establishing data minimization practices.

How does this clause affect you?

Users who elect to use Age Check functionality authorize the collection of facial photographs and identity document images for age estimation and verification purposes. The terms specify that this data is deleted immediately following the verification process and that third-party provider policies will apply to the processing.

Is ConductAtlas affiliated with Spotify?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.