Terms and Conditions

If you are refered to GO.CAM by one of our Business Customers and wish to use the Age-Verification Solution provided by GO.CAM, you are deemed to accept these Terms and Conditions (“T&C”).

Law No. 2020-936 (Chapter IX: Provisions relating to the protection of minors (Articles 21 to 24)) requires website operators to verify the age of a person before granting them access rights to certain websites and/or certain types of content displayed on websites. The Business Customer operates websites to which Law No. 2020-936 (Chapter IX: Provisions relating to the protection of minors (Articles 21 to 24)) applies.

(hereinafter referred to as “GO.CAM”, “we” or “our”) will provide, through the GO.CAM platform, Age-Verification Services to its Business Customers, i.e. the verification and confirmation that the person (“End User”) wishing to obtain access rights to (certain) websites and/or certain types of content presented on websites operated by the Business Customers is aged 18 or over.

The End User is the person whose age must be verified and confirmed for the Business Customer, because the End User wishes to access certain websites and/or certain types of content presented on websites operated by the Business Customer, which websites and/or content are accessible only to persons aged 18 or over.

The purpose of GO.CAM is to provide an effective, reliable and legally secure solution for the age verification and confirmation system applied between End Users and Business Customers.

In order to provide Age-Verification Services to its Business Customers, GO.CAM will need to access personal data and other information (the “Information”) of the End User.

These Terms and Conditions (the “Terms and Conditions”) govern the communication of their personal Information (the “Information”) by the End User to GO.CAM for Age-Verification purposes.

You understand and agree that GO.CAM will provide the Age-Verification Service to the Business Customer on the basis of the Information provided by you. The Age-Verification Service is provided in order to enable a transaction between you and the Business Customer, which will be subject to the Business Customer’s Terms and Conditions, which you accept. Please read these Terms and Conditions carefully before submitting your Information.

DEFINITIONS

For the purposes of these Terms and Conditions, the following terms - when used with capital letters herein - shall have the following meanings, unless otherwise defined in these Terms and Conditions:

“Age-Verification”: means the verification that the End User is not under 18 years of age.

“Age-Verification Methods”: means the verification methods used by GO.CAM as set out in Clause 3 of these Terms and Conditions. These methods include: (1) facial age estimation and liveness verification, (2) identification by credit card, (3) verification of an official identity document, (4) verification using a one-time code sent to the End User’s email address, and (5) contactless NFC verification of an electronic passport or compatible electronic identity document, with on-device chip reading, age verification and facial comparison.

“Age-Verification Service”: means the Age-Verification Services that GO.CAM provides to Business Customers in order to verify that the End User is not under 18 years of age.

“Age-Verification Solution” means a combination of Age-Verification Methods.

“Business Customer”: means the online service provider, individual or company, to which GO.CAM provides the Age-Verification Services, and which operates the website that the End User wishes to visit and/or the online services and/or content that the End User wishes to access.

“End User Data” means any personally identifiable information of the End User provided by the End User through GO.CAM and necessary for GO.CAM to provide the Age-Verification Services to the Business Customer.

“End User” means the person who uses GO.CAM in order to have their age verified so that they can access age-restricted content and/or access websites that have restricted content and/or websites that restrict access to certain features.

“GO.CAM”, “we” or “our”: means , located at , as well as the Age-Verification technology whose purpose is to verify that End Users accessing certain websites and/or certain types of content displayed on websites are not under 18 years of age. We will refer to GO.CAM in these Terms and Conditions, given that it is the commercial brand of the Age-Verification Service.

“Terms and Conditions”: means the content of this document.

“Parties”: the End User and GO.CAM.

“Website Services”: services provided by the Business Customer to the End User, which require access rights, whether to websites and/or certain types of content displayed on websites.

CLAUSES

1. PURPOSE.

1.1 The End User shall provide GO.CAM with the necessary End User Data so that GO.CAM can verify - using Age-Verification Methods - that the End User is not under 18 years of age.

2. OTHER APPLICABLE TERMS.

2.1 The following additional terms also form part of these Terms and Conditions and also apply to your use of GO.CAM:

• Our Privacy Policy, which sets out the conditions under which personal data is processed in connection with the Age-Verification Service.

• Our Cookie Policy, which sets out how and which cookies we use.

3. AGE-VERIFICATION METHODS.

3.1 The End User does not need to have an account on GO.CAM and may therefore use GO.CAM, without creating an account, to proceed with Age-Verification, provided that the End User is directed to GO.CAM for Age-Verification by a GO.CAM Business Customer.

3.2a GO.CAM will carry out Age-Verification as follows:
GO.CAM will carry out Age-Verification using one or more of the following five methods, selected by the End User during the verification process:
(1) Facial Age Estimation and Liveness Verification; you may choose to take a selfie. GO.CAM will capture several snapshots of your face, alternating between smiling and non-smiling poses, in order to ensure that a real person is in front of the camera. If the result is inconclusive,
(2) Official Identity Document; you may choose to upload a valid identity card, driving licence or passport. GO.CAM will extract only the information necessary to determine whether you are of legal age. All processing takes place locally on your device.
(3) Credit Card Verification; you may also choose to enter a valid credit card number, which may be used to confirm that you are at least 18 years old.
(4) Email Code Verification: you may choose to provide your email address. If it is deemed eligible for Age-Verification purposes, GO.CAM will send you a one-time verification code. You will need to enter this code into the verification form to complete the Age-Verification. Your email address is not retained after the session.
(5) Contactless NFC Verification of an Electronic Identity Document; you may choose to verify your age using a compatible electronic passport or identity document equipped with a contactless chip. You will be asked to scan the Machine Readable Zone (MRZ) of the document and read its contactless chip using an NFC-capable device. Relevant document data is processed locally on your device in order to determine whether you meet the applicable age requirement and to perform the document security checks technically supported by the NFC verification method. As part of this method, your selfie may be compared locally with the facial portrait stored in the contactless chip of the document in order to confirm that you are the legitimate holder of the document.

3.2b In all circumstances, GO.CAM reserves the right to request an additional verification method, as described above, in addition to the one already used.

3.2c Contactless NFC Verification of an Electronic Identity Document

3.2c.1 When the End User chooses the NFC verification method, the End User is guided to scan the Machine Readable Zone (MRZ) of a compatible electronic passport or identity document using the camera of their device and to place the NFC-capable device against the contactless chip of the document.

3.2c.2 The application uses the MRZ to establish a BAC or PACE connection with the contactless chip of the document and reads the document information required for verification, including DG1 and DG2. This information is processed locally on the End User’s device in order to determine whether the End User meets the applicable age requirement and to perform the document security checks technically supported by the NFC verification method.

3.2c.3 The current NFC verification method does not validate the document signing certificate against a CSCA trust list or master list. Consequently, GO.CAM does not present the NFC verification result as an official certification that the electronic document is authentic, unaltered, valid or not revoked.

3.2c.4 Where facial comparison is used as part of the NFC verification method, the End User’s selfie is compared locally on their device with the facial portrait contained in the electronic identity document in order to confirm that the person presenting the document is its legitimate holder. Where facial comparison constitutes processing of biometric data for the purpose of uniquely identifying or authenticating the End User, such processing is carried out, where applicable, on the basis of the End User’s explicit consent.

3.2c.5 The End User represents and warrants that:
(a) the End User is the legitimate and lawful holder of the electronic identity document presented;
(b) to the best of the End User’s knowledge, the identity document presented is authentic, valid, has not been revoked, modified or falsified and is lawfully held by the End User;
(c) the End User will not knowingly present a fraudulent, modified, stolen identity document or an identity document belonging to a third party, and will not otherwise attempt to circumvent the NFC verification process.

3.2c.6 GO.CAM is an independent commercial technology provider. GO.CAM is neither a government authority nor a passport or identity document issuing authority, and the provision of the NFC verification method does not imply any affiliation with or endorsement by any such authority. GO.CAM neither issues nor certifies official identity documents.

3.3 GO.CAM is designed to operate primarily through local processing on the End User’s device. Images of identity documents or selfies, where applicable, are processed locally on the End User’s device and are neither transmitted to nor stored on GO.CAM servers. For the NFC verification method, MRZ data, data extracted from the contactless chip, including DG1 and DG2, facial images and any biometric template or vector generated for verification are processed locally and temporarily on the End User’s device and are neither transmitted to nor stored on GO.CAM servers or third-party cloud infrastructure. Such NFC document data and biometric data are not intentionally stored in the application’s persistent storage. They remain in the application memory only for the time necessary for the current verification and are released when the verification state is cleared or when the application process ends.

Limited technical or pseudonymised data may be processed transiently where strictly necessary to ensure the proper functioning, security, fraud prevention and integrity of the service. Such data does not enable GO.CAM to directly identify individuals. All communications between the End User’s device and GO.CAM servers are encrypted using security protocols compliant with industry standards.

3.4 Upon completion of Age-Verification, GO.CAM receives only the verification result confirming whether the End User meets the applicable age requirement, together with limited technical information necessary to validate the verification session, such as a session identifier and timestamp. GO.CAM uses the verification result to inform the Business Customer whether or not the applicable Age-Verification requirement has been satisfied. No name, exact date of birth, identity document number, MRZ data, facial image, biometric data or other identifiable data extracted from an electronic identity document is disclosed to the Business Customer.

3.5 The End User must use only their own information, payment methods, email address, identity document or other verification element when using an Age-Verification Method. The End User must not use information, credentials, payment methods or identity documents belonging to another person, nor attempt to circumvent or fraudulently manipulate the Age-Verification process.

Certain limited technical or pseudonymised data may be processed temporarily where strictly necessary to ensure the proper functioning, security, fraud prevention and integrity of the service. Such data does not enable GO.CAM to directly identify individuals.

4. REPRESENTATIONS AND WARRANTIES

4.1 The End User represents and warrants to GO.CAM that:

4.1.1 All Information and all verification elements provided or used by the End User in connection with the Age-Verification Service are personal to the End User, truthful and accurate and, where applicable, the End User is the legitimate holder or authorised user of the relevant identity document, payment method, email address or other verification element.

4.1.2 The End User shall not use any “computer worm”, “virus”, “malware” and shall not use any device that could impair or damage GO.CAM or any other person or entity when using the GO-CAM platform;

4.1.3 The End User is already familiar with the Internet and shall comply with all applicable rules and regulations.

4.2 GO.CAM does not warrant that the websites and/or content displayed on websites that the End User wishes to access after Age-Verification are appropriate for the End User or available in locations other than France.

4.3 GO.CAM’s Age-Verification Methods are designed to assist Business Customers in implementing age assurance measures in accordance with the applicable requirements of the UK Online Safety Act 2023 and relevant Ofcom guidance, including, where applicable, requirements relating to highly effective age assurance. Compliance with regulatory obligations applicable to a Business Customer remains the responsibility of that Business Customer.

5. CONFIDENTIALITY.

5.1 GO.CAM undertakes not to disclose any confidential information and/or personal data of the End User.

5.2 Where GO.CAM is required by a competent court, administrative authority or any other legally authorised body to disclose information relating to an End User, GO.CAM will comply with such request to the extent required by applicable law and only with respect to information actually available to GO.CAM. Due to the privacy-preserving architecture of the Age-Verification Service, GO.CAM neither receives nor retains images of identity documents, MRZ data, contactless chip data, facial images or biometric data processed locally on the End User’s device. Consequently, GO.CAM cannot disclose data that it does not possess. Any disclosure will be limited to information lawfully available to GO.CAM, such as applicable verification results or limited technical or pseudonymised information retained in accordance with GO.CAM’s applicable retention framework.

6. INDEMNITY. LIMITATION OF LIABILITY.

6.1 Under no circumstances shall GO.CAM be liable to the End User, whether legally, morally or otherwise, under these Terms and Conditions, for any tort (including negligence), whether or not GO.CAM has been advised of the possibility of such damages, whether indirect, incidental, consequential, special or exemplary, resulting from any provision of these Terms and Conditions.

6.2 GO.CAM is provided “AS IS” and “AS AVAILABLE” and we do not warrant that the information, content, services or results available when using GO.CAM are accurate or reliable or that, during your use of GO.CAM, the verification will be uninterrupted, secure or error-free.

7. INTELLECTUAL PROPERTY RIGHTS

7.1 Unless otherwise indicated, we are the owner or holder of all intellectual property rights in GO.CAM and in the materials published thereon. Copyright laws and treaties worldwide protect these works. All rights reserved.

7.2 The use of our products or services does not grant you any intellectual property rights in our products or services, or in the content you access.

7.3 GO.CAM and the services and content provided by GO.CAM are protected by copyright, trademarks, patents, trade secrets, as well as by international treaties, laws and other proprietary rights and may incorporate security components that protect digital materials. You agree not to take any action intended to interfere with anyone’s rights in their content and you will not attempt to circumvent provisions intended to prevent the unauthorised reproduction or distribution of content.

7.4 You may not use any of our trade names, trademarks, service marks, logos, domain names, etc.

8. AMENDMENT.

8.1 GO.CAM reserves the right to amend the provisions of these Terms and Conditions provided that such amendments are minor and limited in scope, and to do so without giving any reason, provided that such amendments do not result in an amendment of the Terms and Conditions as a whole. The applicable Terms and Conditions will be permanently available on the GO.CAM website.

8.2 For the processing of End User Data necessary for the provision of the Age-Verification Service, the Business Customer acts as Data Controller and GO.CAM acts as Data Processor, processing such data on behalf of the Business Customer and in accordance with its documented instructions. GO.CAM may act as an independent Data Controller only for strictly limited processing activities carried out for its own purposes, such as security, fraud prevention, service integrity and compliance obligations, where applicable. GO.CAM does not retain identifiable End User Data beyond the verification session, except where expressly required by applicable law or documented in the applicable retention framework.

Data processed locally on the End User’s device as part of the NFC verification method, including MRZ data, contactless chip data, facial images and biometric templates or vectors, are neither transmitted to nor retained by GO.CAM. Verification results and limited technical or pseudonymised information may only be retained for the periods and purposes described in the applicable Privacy Policy and retention framework.

9. DISPUTE RESOLUTION

9.1 These Terms and Conditions shall be governed by and interpreted in accordance with the laws of France.

9.2 For any matter relating to the interpretation or execution of these Terms and Conditions, the Parties expressly waive submission to any court that may have jurisdiction over the subject matter and agree to submit to the sole competence and jurisdiction of the courts of the City of Marseille.

9.3 If any mandatory law or regulation provides that the competent courts shall be those of the domicile of the End Users or others, such mandatory laws shall prevail with regard to the competence and jurisdictional courts for any matter relating to the interpretation or execution of these Terms and Conditions.

10. GENERAL PROVISIONS.

10.1 Force Majeure. If either Party is prevented from performing or is unable to perform any of its obligations under these Terms and Conditions due to causes beyond the control of the Party invoking this provision, including, but not limited to, natural disasters, acts of civil or military authorities, riots or civil disobedience, wars, strikes or labour disputes (each, a “Force Majeure Event”), that Party’s obligation shall be excused and the time for performance shall be extended accordingly, provided that such Party immediately takes all reasonably necessary measures to resume proper performance. If such Party remains unable to resume full performance fifteen (15) days after the Force Majeure Event, the other Party may terminate these Terms and Conditions by written notice.

10.2 Severability. If one or more provisions of these Terms and Conditions are declared invalid or unenforceable by a competent court or administrative authority, they shall be deemed severable from the remainder of these Terms and Conditions and the validity or enforceability of the remainder of these Terms and Conditions shall not be affected in any way. Such provisions shall then be amended to achieve their objectives to the extent possible and in accordance with applicable law or the judgment of the competent courts or competent administrative authority, while taking into account the interpretation of the Terms and Conditions as a whole.

10.3 Survival. 5 (Confidentiality) and 9 (Dispute Resolution) shall continue to apply upon termination or expiry of these Terms and Conditions for any reason whatsoever. All other rights and obligations of the Parties arising under these Terms and Conditions shall expire upon termination of these Terms and Conditions.

10.4 Assignment. GO.CAM shall be entitled to assign, sublicense, delegate or otherwise transfer any of its rights or obligations under these Terms and Conditions without the prior written consent of the other Party if the assignee assumes all rights and obligations under these Terms and Conditions.

10.5 Notices. All notices and other communications between the Parties shall be made in writing and by email with acknowledgement of receipt. Either Party may change its address by providing the other Party with written notice of the change in accordance with this section.

10.6 Entire Terms and Conditions. These Terms and Conditions constitute the entire Terms and Conditions applicable between the Parties and supersede all previous Terms and Conditions, whether oral or written, with respect to the subject matter of these Terms and Conditions.

10.7 No Third-Party Beneficiary These Terms and Conditions are binding upon and apply exclusively to the Parties hereto and their permitted successors and nothing herein may be construed as an authorisation (express or implied) given to any other person to exercise any legal or equitable right, benefit or remedy of any nature whatsoever under or by reason of these Terms and Conditions.

Last modified 17 September 2026

Privacy policy

This Privacy Notice explains how personal data is processed in connection with the GO.CAM Age Verification Solution. It is intended to provide clear and transparent information in accordance with applicable data protection laws, including the EU GDPR, UK GDPR, the UK Online Safety Act (2023), and French Law No. 2020-936.

This notice applies to End Users undergoing age verification via GO.CAM, as well as Business Customers integrating the solution. It does not apply to any data processing carried out independently by the Business Customer on its own platform.
For the purposes of data protection, the Business Customer (Information Society Service) acts as the Data Controller, as it determines the purpose of requiring age verification. GO.CAM acts as a Data Processor, processing data strictly on documented instructions from the Business Customer. However, GO.CAM may act as an independent Data Controller for strictly limited technical or security-related processing where necessary to ensure service integrity, prevent fraud, or comply with legal obligations.
Where GO.CAM acts as an independent Data Controller, the legal bases relied upon under Article 6 UK GDPR are :

• Article 6(1)(f) – Legitimate Interests, for ensuring service security, fraud prevention, business customer account management, supplier and sub-processor management, and certain customer support activities where appropriate.
• Article 6(1)(c) – Legal Obligation, where processing is necessary to comply with applicable legal or regulatory requirements.
• Article 6(1)(a) – Consent, where the End User voluntarily selects a verification method involving processing for which consent is relied upon, including facial biometric comparison where applicable.

GO.CAM has been designed following a privacy-by-design and data minimisation approach. The solution operates primarily through local processing on the End User’s device and does not create user profiles, track individuals, or build any form of behavioural database. GO.CAM does not store or retain identifiable personal data of End Users beyond what is strictly necessary for the operation, security, and compliance of the service.
Depending on the verification method used, certain data may be processed temporarily during the session. This may include a selfie image, an identity document image, partial card information, an email address used for one-time verification, or data read locally from the contactless chip of a compatible electronic identity document when the NFC verification method is used.
When the email-based verification method is used, GO.CAM processes the email address solely for the purpose of sending a one-time verification code. GO.CAM does not store plaintext email addresses. Where technically required, only an irreversible hash may be processed. Plaintext email addresses are neither stored nor logged, whether temporarily or permanently.

When the NFC Contactless Electronic Identity Document verification method is used, the End User is invited to scan the Machine Readable Zone (MRZ) of a compatible electronic passport or identity document and to read its contactless chip using an NFC-capable device. The MRZ information is used locally to establish secure access to the chip. Relevant chip data, including Data Group 1 (DG1) and Data Group 2 (DG2), may then be processed locally for the purposes of determining whether the End User meets the applicable age threshold and performing the document security checks technically supported by the NFC verification method.
All NFC document processing, including access to and reading of the contactless chip, processing of the MRZ and relevant chip data, and the facial similarity comparison between the End User’s live selfie and the facial portrait contained in DG2, is performed locally on the End User’s device. Raw MRZ data, identity document images, chip data, facial images and biometric templates or vectors generated for this verification are not transmitted to or stored on GO.CAM servers or third-party cloud infrastructure. Such data is processed only transiently for the duration of the verification and is deleted from the device’s volatile memory upon completion or termination of the verification session. The current NFC verification method does not validate the document-signing certificate against a CSCA trust list or master list. Accordingly, GO.CAM does not represent the NFC verification result as an official certification of the electronic document’s authenticity, validity or revocation status.
Where the NFC verification method involves a facial similarity comparison between the End User’s live selfie and the facial portrait contained in the electronic identity document, biometric data may be generated and processed locally on the End User’s device solely for the purpose of confirming that the person presenting the document is its legitimate holder. Such biometric processing is performed only as part of the NFC verification method voluntarily selected by the End User. Where the facial comparison constitutes processing of biometric data for the purpose of uniquely identifying or authenticating the End User, GO.CAM relies, where applicable, on the End User’s explicit consent in accordance with Article 9(2)(a) GDPR and UK GDPR. The biometric data and resulting templates or vectors remain under the End User’s control on the device, are not transmitted to GO.CAM or the Business Customer, and are deleted upon completion or termination of the verification session.
Upon successful completion of the NFC verification process, the document data and biometric data used locally are not transmitted to the Business Customer. Only the verification outcome confirming whether the End User meets the applicable age threshold, together with the technical information necessary to validate the verification session, such as a session identifier and timestamp, may be transmitted to the Business Customer. The End User’s name, document number, exact date of birth, MRZ data, facial image and other data extracted from the electronic identity document are not disclosed to the Business Customer.
In addition, GO.CAM may process limited technical and non-identifying data strictly necessary for the operation and security of the service. This may include limited device and browser metadata, verification outcome (such as confirmation that the user is above the required age threshold), and anonymised or pseudonymised technical logs. IP addresses may be processed transiently for security and operational purposes but are not stored or retained by GO.CAM.

GO.CAM may rely on a limited number of third-party service providers strictly for technical support functions. For example, during the Email + Code verification method, a partial hashed representation of an email address may be transmitted using a k-anonymity model to a third-party service (HaveIBeenPwned) to assess exposure to known data breaches. No full email address is transmitted, and no personal data is stored by GO.CAM in this process. Where such services involve transfers outside the European Economic Area, appropriate safeguards such as Standard Contractual Clauses (SCCs) are implemented, and only pseudonymised or hashed data is transmitted.
Personal data is processed solely for the purpose of verifying that the End User meets the applicable age requirement, preventing fraud or circumvention of the system, and ensuring the security and reliability of the service. GO.CAM does not use personal data for marketing, advertising, analytics unrelated to security, or any form of user profiling.

GO.CAM applies strict data minimisation and retention principles. Images and identity documents are not retained and are deleted immediately after processing within the session. For the NFC verification method, MRZ data, data extracted from the contactless chip (including DG1 and DG2), facial images, and any biometric templates or vectors generated for the verification are processed only transiently on the End User’s device and are deleted upon completion or termination of the verification session. Email addresses used for verification are not retained. The age verification result may be stored for a limited period where necessary (typically up to 30 days), and anonymised technical logs may be retained for security and audit purposes for a limited duration (typically up to 12 months). All data retained by GO.CAM is automatically deleted or anonymised in accordance with internal retention policies.
End Users may exercise their data protection rights, including the right of access, rectification, erasure, restriction, or objection, either through the Business Customer or directly by contacting [email protected]. However, due to the privacy-preserving architecture of GO.CAM, in most cases no identifiable personal data is retained by

GO.CAM, and therefore no data can be retrieved or deleted by GO.CAM.

GO.CAM implements appropriate technical and organisational measures to ensure a high level of security, including local-first processing, encrypted communications (TLS), strict access controls, and the absence of any centralised storage of biometric data. For the NFC verification method, GO.CAM uses data formats and secure chip-access mechanisms commonly used by compatible electronic passports and identity documents, including MRZ, DG1, DG2, BAC and PACE where supported by the document and device. The current implementation does not perform CSCA master-list validation and therefore does not independently certify the electronic document’s authenticity, validity, revocation status or compliance with ICAO Doc 9303.
GO.CAM may use a strictly necessary technical cookie (such as "isAgeVerified") to remember the outcome of a verification session and avoid repeated checks. This cookie does not contain personal data and is not used for tracking or advertising purposes.

For any questions or requests related to this Privacy Notice or data protection, GO.CAM can be contacted at [email protected].
Date of last update: September 2026