Can you discard DOB data for users who are over 18?
PhoenixFallen
Your recent FAQ describes the age verification system as involving persona transmitting government recorded Date of Birth to you, which is stored for at least the duration of verification status being active on the account.
I'm quite cagey about DOB for a variety of personal reasons and have successfully kept that data off the internet and out of the hands of data brokers. I was hoping your age verification system would just involve persona basically telling you yes/no on 18+ and that you'd be storing a boolean. It makes sense for underage users that you'd also want a way to graduate their account to 18+ verified on their birthday, but storing DOB after that event feels in conflict with the goal:
"Whenever possible, VRChat will choose to minimize the amount of data retained and the duration for which it is retained, as long as it doesn’t impact the effectiveness of our Age Verification program."
So I would ask that you please consider discarding DOB data after a certain age, be it 18 or 21 or whatever the maximum age you can foresee needing is, to align with those goals and better protect users in the event of data leaks or other accidents involving this identity data. It would be reassuring if you're able to do this, if you could confirm the implementation of this data discard before verification widely launches.
Log In