Sniffies Age Verification: Ofcom Probes How Users Prove Age

Right now, on a gay dating app called Sniffies, a person can type in a birth date that says they're over eighteen, and that's it. No check. No proof. The U.K.'s media regulator, Ofcom, is now investigating whether that's how children are getting in.

If you've ever clicked "I'm over eighteen" on a

If you've ever clicked "I'm over eighteen" on a website, this story is about you. That click is about to change. In the U.K., the fix for that gap means showing your face to a camera, or uploading a government I.D. And for a dating app, that's a deeply personal thing to hand over.

Here's the situation. Under Britain's Online Safety Act, platforms with pornographic content must use what the law calls highly effective age checks. A checkbox doesn't qualify. Ofcom says Sniffies lets anonymous users declare their age and start using the service. So the regulator is asking whether children can get in.

The deeper question isn't whether children should be kept out. It's what adults give up to prove they're adults, and who holds it afterward.

Start with how serious Ofcom is

Start with how serious Ofcom is. As of February twenty twenty-six, the regulator has opened investigations into more than ninety online services. It has issued six fines. The most recent was eight hundred thousand pounds, for failing to put age checks in place. This isn't a warning shot anymore.

Now think about what compliance looks like for you. You open a dating app. It asks for a face scan or a photo of your passport. You want in, so you tap yes. Where does that scan go?

It depends entirely on the company. The age-check provider Yoti says it deletes biometric scans immediately. Hinge, by contrast, may keep verification data for up to twelve months. Same legal requirement. Very different outcomes for your face.

There's no easy way to compare before you agree

And there's no easy way to compare before you agree. Most people see a short line about safety or compliance. The app gets a powerful piece of identity Facial Recognition Camera All 8 Wrong Ids Hit Darker Skin. You get a vague promise.

Then there's the question of who's responsible. Ofcom's twenty twenty-six guidance says no single method stops every workaround. It also says the platform stays responsible even when it outsources the check. So the dating app is on the hook for how its vendor handles your data. But your own rights, as the person scanned, remain hard to see.

That matters because leaks aren't hypothetical. In twenty fifteen, the Ashley Madison breach exposed about thirty-six million users. In twenty sixteen, the FriendFinder Network breach exposed more than four hundred million accounts. Those were names, emails, and sexual preferences.

Imagine the next breach also holds a

Now imagine the next breach also holds a government-verified identity and a scan of your face. You can change a password. You can't change your face.

For the companies, that's a liability question. For the rest of us, it's a simple one. Would you want that file sitting on a server somewhere?

There's a serious counterargument, and it deserves its time. Sniffies has faced scrutiny in the U.S. over criminal cases. Adults have been accused of sexual offenses against minors they allegedly met through the platform. Without real age checks, an app can become a place where predators find children.

Supporters of verification also point out that the

Supporters of verification also point out that the method matters. A check that estimates age from a face and never stores the image is far easier to defend than one that keeps it. Some providers already work that way. The risk, in this view, isn't the age check itself. It's the companies that cut corners.

So the real divide isn't between protecting children and protecting privacy. It's between checks that forget your face and checks that keep it. Same law, same camera, and completely different consequences.

In plain terms, the U.K. wants apps to prove their users are adults. That means your face or your I.D. And the safest version is the one where the company looks, confirms, and throws it away.