For adult sites that use face-based age estimation and have Illinois visitors

A face scan for an age check is a biometric identifier.

Purgeline keeps what Illinois’ Biometric Information Privacy Act asks of a site that scans faces to estimate age: the written, public retention schedule, every batch of scans with its signed release and the day it must be destroyed, and every vendor that receives face data and whether the release and contract cover it.

Open the demo See pricing

Opens in this browser with an invented site already in it. No account, no email address, nothing installed.

Purgeline with its example records in it

Open the free demo →

The problem

$1,000 a person, $5,000 if reckless.

Under BIPA, a business holding biometric identifiers needs a written public retention policy, destroys them within three years of the last interaction or when the purpose is met, and gets a written release first. Liquidated damages run $1,000 for each negligent violation and $5,000 for each intentional or reckless one. An age-check vendor scanning thousands of faces a month multiplies that fast.

3 years

the outer limit to destroy biometric data after the last interaction.

740 ILCS 14 →

Written release

first, before the scan — a check box counts since August 2024.

740 ILCS 14 →

$1,000 / $5,000

per violation, negligent or intentional.

740 ILCS 14 →

Will not let a batch outlive its date unnoticed.

A batch past its destroy-by date leads the file; one within seven days is flagged. A batch with no count is refused. A check screen with no release, or a release after the scan, and a vendor receiving face data the release never mentions are each a stop — with what is at stake, in dollars.

How it works

Schedule, batches, vendors

Publish the schedule

How many days scans are kept, the three-year outer limit, and where it is posted. Versions are added, never edited.

Log each batch

How many people, the release and whether it came first, what the notice says, the last visit, and the destroy-by date.

Check every vendor

Who receives face data, whether the release covers it, and whether the contract forbids selling it.

What it will never do

It keeps the schedule. It holds no faces.

Purgeline holds no face data and deletes nothing. It tells you which batches to destroy and when.

No biometric data.Counts and dates only — never a scan.

No vendor link.You destroy the batch; Purgeline records the day.

It is not a lawyer.Not legal advice.

It never touches a payment.The subscription is for software.

Pricing

Priced per site

Less than one person’s negligent violation.

Most sites

One site

$19/month

One site with face age checks.

Published schedule versions
Destroy-by date per batch
Vendors and releases checked

One site, yearly

$190/year

The same, two months free.

Everything in One site
What is at stake, in dollars
Export for your counsel

Subscription. Your bank statement says Purgeline Software. Refunded in full on request within 30 days. Your licence key is emailed to you within two working days of payment.

Checkout is our own bitcoin server, not a card processor — nobody we had to apply to and nobody who can close the account. The button takes you straight to it. Give your email address there — that is where your key is sent.

Questions

The ones we actually get asked

Does age estimation count as biometric?

A face scan used for an age check is a biometric identifier under BIPA.

When must scans be destroyed?

When the purpose is met, or within three years of the person’s last visit, whichever comes first.

Can a check box be the release?

Since August 2024, yes — if it comes before the scan and says what, why and for how long.

Is this legal advice?

No. It is the schedule you wish you had kept.

What do I actually get when I pay?

The demo on this page is the whole program, running on invented records. Paying gets you a licence key — one line of text, emailed to the address you give at checkout within two working days. Paste it into the program and from then on it keeps your own records. Until then, nothing you type into it is kept.

The key is checked inside the page, on your own machine. It never calls us, so there is still no account and nothing about your business goes anywhere. If you ever stop paying, your records stay exactly where they are, read-only, and Export still hands you every one of them.

Open the demo before the next batch

The invented site never destroyed September’s 1,840 scans, has a new check screen with no release box, destroyed August late, and passes face data to a fraud partner the release never mentions.

Open the demo See pricing