Legal
Last updated: 19 August 2026
Flirtly is an 18+ service. The age gate is a legal duty in a growing set of jurisdictions and a hard requirement of the payment networks we work with. It exists so the service can exist.
| Tier | Where | What happens |
|---|---|---|
| Attestation | Most jurisdictions | You confirm you are 18+ at entry. The confirmation is recorded with a timestamp and your IP-derived location. |
| Hard verification | US states with age-verification mandates, the UK, and the EU | A third-party verification check is required before any mature content is served — not at signup. |
| Blocked | Jurisdictions where the service does not operate | The app does not load at all. No content, mature or otherwise, is sent. |
Your tier is resolved at the network edge from your location before the app loads, and the result is cryptographically signed so it cannot be forged by direct requests.
Late — but not later than the first mature pixel. You can create an account, browse non-explicit character previews and use the app in a genuinely safe-for-work mode without verification. The hard wall sits at the boundary of mature content. In jurisdictions that require hard verification, no explicit content is shown before or during the check — at the byte level. No blurred previews, no low-resolution teasers: the bytes are not sent until verification passes.
Method depends on the vendor and your location: facial age estimation, an identity document with a liveness check, or — where they convert better — approved alternatives such as open-banking, mobile-operator or digital-identity checks. The cheapest acceptable method is tried first; harder methods are only used where the first is inconclusive.
After a successful check we store, and only store:
We never receive or store the identity document, any document image, the document number, your name as it appears on the document, your date of birth, the face scan or any biometric template — in any table, log, backup or error report. The vendor holds the evidence; we hold the boolean. That is deliberate: the less identity we hold, the less a breach can expose.
Attestation records a timestamp, your IP-derived country and region, the method, and a hash of your browser identifier. Raw IP addresses are kept for no more than 30 days, and then only the derived location remains.
An age assurance expires after 12 months, immediately if you move to a jurisdiction with a stricter tier, or on a safety flag. When it expires, you are re-checked at the mature content boundary — not at signup.
Do not use Flirtly. Attempts to bypass the age gate are logged, the account is closed, and nothing is served in the meantime.
Age data is personal data; how it is protected, retained and deleted is in the Privacy Policy.