OpenAI Is Quietly Using a Surveillance-Linked Service for Age Verification
You probably didn't get an email about it. There wasn't a blog post announcement. But if you're using ChatGPT and run into age verification, you might be handing over your ID to a company with ties to one of the most controversial surveillance firms in the world.
Here's what's happening.
The Backstory: Discord's Age Verification Disaster
A few weeks ago, Discord announced they'd be testing age verification using a service called Persona. Within days, people discovered Persona has connections to Palantir - the data analytics company known for contracts with ICE, the Pentagon, and intelligence agencies around the world.
The backlash was immediate and loud. Privacy advocates raised alarms. Reddit lit up with concerns about surveillance. Discord quickly pivoted to a different provider called K-ID.
Crisis averted, right?
Not quite.
OpenAI Is Using The Same Service
While everyone was focused on Discord's mess, OpenAI quietly implemented age verification using the exact same Persona service.
According to their FAQ and user emails, if you need to verify your age to use ChatGPT (required in certain regions or for certain features), you'll be directed to Persona's platform.
Same company. Same Palantir connection. Same privacy concerns.
But this time? Almost no one is talking about it.
Why This Matters More Than You Think
"I don't have anything to hide" is a common response to privacy concerns. But this isn't about hiding. It's about control.
When you upload your driver's license or passport to verify your age, you're not just proving you're over 18. You're handing over:
- Your full legal name
- Your date of birth
- Your home address
- A government-issued ID number
- Your face (via photo)
That's enough data to uniquely identify you across systems. Permanently.
Now add the fact that you're using this data to access an AI service that knows:
- What questions you ask
- What problems you're trying to solve
- Your writing style and thought patterns
- Potentially your work projects, personal struggles, creative ideas
Connect those two datasets and you have an incredibly detailed profile of a person.
The Palantir Connection
Palantir isn't just any tech company. They specialize in data integration and analysis for government agencies and large organizations. Their tools are designed to find patterns across massive, disparate datasets.
The concern isn't that Persona IS Palantir (they're separate companies). The concern is the relationship between them and what it could enable.
If Persona has ties to Palantir, and Persona is handling identity verification for major platforms like OpenAI and Discord, there's a potential pipeline for connecting verified identities to behavioral data at scale.
Is that happening? We don't know. But the infrastructure to enable it exists, and that alone is worth paying attention to.
What You Can Do About It
If you're already using ChatGPT and haven't been asked to verify your age, you're probably fine for now. Age verification isn't universal - it depends on your region and how you're using the service.
But if you ARE asked to verify, here's what to consider:
1. Check if it's actually required
Some features might be age-gated, but basic ChatGPT use often isn't. See if you can continue without verifying.
2. Understand what you're agreeing to
Read Persona's privacy policy before uploading your ID. Look for how long they keep your data, who they share it with, and how you can request deletion.
3. Use alternative AI tools
Claude, Perplexity, and other AI assistants might have different verification requirements (or none at all). If privacy is your priority, shop around.
4. Consider the tradeoff
If you decide the convenience of ChatGPT outweighs the privacy cost, that's a valid choice. Just make it knowingly, not by default.
The Bigger Pattern
This isn't really a story about OpenAI or Persona or even Palantir.
It's about a pattern that keeps repeating: powerful technology gets rolled out, privacy implications get buried in the fine print, and by the time people notice, millions of users have already opted in.
Discord faced public pressure and changed course. OpenAI is doing the same thing and barely anyone noticed.
The difference? Attention.
When we pay attention to how our data is being used - and who it's being shared with - companies respond. When we don't, the defaults win.
Right now, the default is: upload your ID to access the AI that's becoming essential to how you work, learn, and create.
Maybe that's fine. Maybe the convenience is worth it.
But you should at least know it's happening.
What's Next
OpenAI hasn't announced plans to change age verification providers. As of now, if you're asked to verify, Persona is the system in place.
Keep an eye on your email. Check the ChatGPT settings. And if you're asked to upload an ID, take a minute to decide if it's worth it.
Your driver's license doesn't expire when you close the tab.
Have you been asked to verify your age on ChatGPT? What did you do? Reply and let us know - we're tracking how widely this is being rolled out.
Source: Reddit discussion