Age Policy

1. 18+ only

Parscor scores photos against a 1–10 scale and, in upcoming releases, will pair you with other users whose scores sit nearest yours. The product is built for an adult audience, so visitors must confirm they are at least 18 years old before they can upload photos or read their scores. The gate runs once per visitor and is enforced both at the page layer (a DOB + checkbox form on /scan) and at the API layer (the same signed cookie must accompany every scoring request).

2. Why we ask

Our scoring flow processes biometric photos — selfies and full-body photos — of an adult audience. We use the answer to one question (your date of birth) plus the explicit checkbox confirmation to verify that no scoring request is initiated by or for a visitor under 18. The gate is anonymous: it runs before signup, and it does not require an account.

3. What we store

The gate does not persist your date of birth, nor any profile row keyed to it. After a successful verification we set one HTTP-only, signed cookie named pscr_age_ok with a fixed body of 1 plus its HMAC-SHA-256 signature using a server secret. The cookie is the only artifact the gate writes — clearing your browser cookies removes it, after which the gate appears again on the next visit to /scan. The cookie expires after 90 days.

The HMAC binds the literal body of the cookie to a server-only signing key. Any forgered stamp — a body other than 1, a tampered signature, or no signature at all — fails verification and triggers the gate again.

4. What happens for under-18 visitors

When the computed age is below 18, the gate does not issue the cookie. Instead the page swaps the gate for a blocking screen with a single link back to the home page and a link to this policy. No scoring endpoint is reachable, so no upload, score read, or context lookup is possible for that visitor.

5. Contact

Questions about this policy can be sent to parscor@polsia.app.