Age Verification Feedback

When your Uploaded avatars are filtered by Content Gating, these become unlisted from the "Uploaded" tab, the VRChat Home avatars list, and the Content Manager in the VRChat Avatars SDK. This may incorrectly incentivize creators to remove Content Warnings from avatars they've uploaded themself for usability reasons, to switch into those avatars more easily - unless you are Verified 18+ and can disable Gating. The issue comes from stifling creators who are not Verified 18+ (but may be older than 18 years old), have uploaded some of their avatars with "Sexually Suggestive" content warnings, and want to switch into those "Sexually Suggestive" avatars themselves. Functionally switching into these filtered self-uploaded/private avatars is plausible, but these avatars may become forcefully unlisted by Content Gating (per VRChat's blog post) and are only accessible directly by a known URL/avatar ID, from Recently Used, or from Favorite Avatars. This hurts discoverability and may incentivize these stifling creators to remove Content Warnings in order to switch into these avatars in app without obstacles, with the intent to avoid going through an Age Assurance process and the plausible associated costs incurred to the creator (e.g. a month of VRC+ to become age assured). Additional info: https://ask.vrchat.com/t/developer-update-25-june-2026/48618/35 https://hello.vrchat.com/blog/june-2026-safety-update Note: I'm Verified 18+ btw.

They scan your ID against 250+ sources, not to mention keeping a record on you for years after you verify, while having your whole ID and SO many data breaches.

I've been an active user for 5+ years, primarily in the rave scene. over the past while, more and more venues I've attended for years have adopted age verification, which I won't use because I'm not willing to hand over that kind of personal information for a social platform recently my favorite event age-gated itself right before my birthday, which was the last straw for me I don't want to leave, but I'm currently making plans to move to another platform. I hope there's an alternative path being considered that doesn't require giving up my privacy because I'd like a reason to stay thanks for reading

As an Individual who has played VRChat for many years and a high advocate for online privacy. I have concerns about the movement where age verification is going to. Reasoning against ID verification: People should NEVER give their ID out to any online service. There's no reason to have your government ID linked to an online account. I understand that people can argue that only a hash of your ID is stored and so on. But it's not about what they claim to store. It's that you have to give it to them in the first place. Now for an alternative: Parental accounts. An easy way that has been successfully implemented by many companies. E.G. Windows Live Family Safety (Microsoft family features) The use of parental accounts to create accounts for children, being able to monitor and control what they can view. It shouldn't be the responsibility of third parties to block content. It should be parents responsibility to set up the right and safe constraints to have their kid safely browse and use the internet. Thank you for reading. Edit: Fix some spelling mistakes.

It will always be worth restating no matter how many times or in how many ways it's said. Privacy isn't just some word bad people hide behind. Trust and safety should apply to all users. I'm not going to presume VRChat's need to perform identity verification as part of their strategy. I'm just throwing my opinion in that the level of data sharing is excessive for the goal of age verification and creating a reasonably safe environment. Laws can change or be broken. Policies can be quietly ignored. People can be put at risk through no fault of their own. I'm of the opinion that platforms like VRChat have a responsibility to implement these systems in a way that maximizes and maintains privacy. VRChat are the ones that want to own the platform after all - rather than letting users self-host or federate. The level of trust that can be put into the 'trust me bro' assurance that PII or other personal data artifacts are handled appropriately is paper thin. VRChat's choice of partner has (rightfully) come into public view on multiple occasions for exactly the wrong reasons. VRChat has become an important social outlet for me. My group has taken to mostly use 18+ instances regardless. So now I become a burden if I'm to be included (not a great feeling). I can only speculate other groups are the same. Meaning verification is all but necessary to even participate and will probably get worse once content gating is in. Making the verification process a matter of coercion rather than purely of consent. I sincerely hope VRChat comes up with a more appropriate solution.

Please update VRChat's login data to let the users track where their logins are coming from, both for the staff and for the common VRC user. Doing this will catch a few people whom have at least said their accounts have been hacked as well as catch those whom sell their accounts with significantly strange login data. Kind of like that one "Find My Device" for Google but for VRC users.

I don't myself have an issue with a way of finding out if the user is actually 18 How you go about it is NOT by partnering with a company that wants users data for surveillance reasons, which means you ARE handing off your vulnerable population to god knows where for them to be hurt. Asylum seekers cannot verify, same with people who have no way to verify themselves. And what about us folk who want our privacy? there is a lot wrong with how you are approaching this.

Use a different method or business to age verify. Persona has had multiple data leaks and lies about how they store and use data. They do not delete it they keep it and sell it. They are a safety risk and a moral failing.

The age verification service "Persona" requires an entirely unredacted government-issued identification to grant verified age status for VRChat. I find this unacceptable. In my case, in exchange for VRChat receiving verified age information, Persona receives my: Name, first and last, Address, Driver's License Number and class, Sex, Height, Weight, Eye colour, Hair colour, Signature, and barcodes that can be used to find the same or more information about me. All so VRChat can have the one data point on the card they care about: Date of Birth. I will make concessions for the use of Height, Weight, Eye colour, Hair colour, and the photo on the ID with an accompanying self photo for the sole purpose of verification. The balance of what is required versus what is ultimately used is egregiously skewed. And while VRChat's contract with Persona stipulates that any identification data obtained by Persona must be deleted upon completion, there is comparatively little risk to Persona keeping the wealth of information illegally. Should a breach occur, users that have had their personal data exposed would be left fighting for the rest of their lives against Identity theft and fraud, while Persona would likely only be served a monetary fine. The risk versus the reward is far too unbalanced against the user. As for how likely it may or may not be that Persona is holding such data illegally, I would like to make note that Persona is based in the United States of America, and you don't have to look very hard to find the state of professional accountability for wealthy companies backed by powerful people in that country. Suffice to say that I do not trust Persona with my identification information, and am upset that the age verified features will be unavailable to me due to this. I implore VRChat to consider other avenues of age verification that do not require such extreme overreach of personal data collection. Regards -Aranethon

having to give persona full details on my id and face scans is fkn crazy, if all VRC wants is a dob then let me put some paper over the details they don't need to see. e.g; physical address, legal name, face. ect ect. and why would they even want face shots if they can tell if they have duplicate records of the same id. completely unnecessary and a clear issue when they pass that sht around like candy and KEEP HAVING LEAKS again, and again. Proving they're not worth trusting to STORE it. using it is one thing. keeping it is another. I don't see why the attached image isn't able to be valid. date of birth, (expiry is even debatable), country, and a card/licence number. is More than enough.