This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Spotify collects biometric and identity document data—among the most sensitive categories of personal data—as part of age verification, making the scope and handling of such data highly consequential.
Interpretive note: The excerpt references facial age estimation as a separate mechanism but the sentence is incomplete as quoted; the primary claim covers the explicitly stated methods. The facial age estimation use is noted in omitted_material.
To complete an Age Check, you are required to provide a photo of your identity document, and in some cases a photo of your face, which Spotify processes to verify your age.
How other platforms handle this
Target may use an automatic dialing system to deliver text messages to you.
Where features are available, you may choose to browse certain content in the platform without logging in an account or registering, in which case we may still collect certain Data, including the content you browse, IP address,your interactions with the platform,and associated your device informatio...
"identity document verification: a photo of your identity document is used to confirm your age. In some cases, we may also use a photo of your face to verify that your ID belongs to you facial age estimation: a photo of your face...Excerpt from Spotify's Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Spotify collects biometric and identity document data—among the most sensitive categories of personal data—as part of age verification, making the scope and handling of such data highly consequential.
To complete an Age Check, you are required to provide a photo of your identity document, and in some cases a photo of your face, which Spotify processes to verify your age.
ConductAtlas has identified this type of provision across 285 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.