It asks a question that anyone can answer with one click. Regulators in the UK, the EU, France, Germany and Italy say the same thing in different words: self-declaration doesn’t establish age. Here’s why, and what a real check looks like.
For twenty years, the standard adult-site gate has been a dark overlay with two buttons: “I am 18 or older – Enter” and “Leave”. Sometimes it asks for a date of birth instead. It is quick, it costs nothing, and visitors are used to it.
The problem is in the name. The button asks; it doesn’t check. A twelve-year-old can click “Enter” as fast as an adult, and a date-of-birth field accepts any date. Ofcom’s guidance and the European Commission’s guidelines both say self-declaration doesn’t establish age.
In the UK, Ofcom’s guidance lists self-declaration, including tick boxes and date-of-birth fields without evidence, as not capable of being highly effective age assurance. According to Ofcom (checked 19 October 2026), services that publish their own porn have had to use highly effective age assurance since 17 January 2025, and user-to-user and search services that allow porn since 25 July 2025.
The European Commission’s guidelines on the protection of minors under the Digital Services Act, published on 14 July 2025 according to the Commission (checked 19 October 2026), recommend age verification for porn and say self-declaration is not enough.
France’s Arcom has set a technical standard for age verification on porn sites. Germany’s JMStV allows porn online only inside a closed user group, and the KJM doesn’t describe a pop-up as one. Italy’s AGCOM describes a double-anonymity check by a third-party certifier. None of these sources describes “just ask” as an age check.
Even apart from the rules, a button gate usually fails in practice in three ways, and our scanner sees all three regularly:
over18=1. Anyone can set that cookie in a few seconds and skip the gate forever.A real check establishes age with some kind of evidence. Ofcom names seven kinds of method that can be highly effective: open banking, photo-ID matching, facial age estimation, mobile-network checks, credit-card checks, email-based age estimation and digital identity services. Other countries have their own lists and standards.
Visitors usually see a short step at a provider: a selfie, a bank confirmation or a wallet. Done well, it takes about a minute and the site learns only “adult: yes”, not a name or a date of birth. Italy’s double-anonymity model is built around exactly that.
A strong check in front of a weak site doesn’t help. The provider should tell your server the result directly, server to server. Your server then sets a signed, short-lived proof, and every page and every media file checks that proof before it is delivered.
That is the difference between a gate and a decoration. If your server decides, a visitor without a valid proof gets the gate page and nothing else, whatever they do in their browser.
Removing the button doesn’t mean your homepage has to be a grey wall. A good landing page shows your brand, explains what kind of content you make, names series and categories in words and uses neutral art, and then sends people to the real check. Our neutral landing page guide has HTML and CSS you can copy.
Is a date-of-birth field better than a button? No. It is still self-declaration: anyone can type a date. The sources above describe both as self-declaration.
Can I keep the button as a content warning? A warning screen isn’t the issue; the sources above look at whether a real check follows before explicit content loads. The problem is only when the button is the whole check.
Does a payment card count? It depends on the country. Ofcom lists credit-card checks among the methods that can be highly effective; its list doesn’t name debit cards, which under-18s can hold. Check the method list for each country you serve.
Keep the first page light: a short explanation of why you check, which methods you offer and that you never see the documents. Offer at least two methods, for example an age estimate from a selfie and a check through an ID app, so people can pick one they trust. Remember a successful check with a signed cookie so returning visitors are not asked again on every page.
Not legal advice. This page summarises and links to primary sources; it does not tell you what the law requires of your specific site. Related: Choose a real age-check method · Neutral landing page · Age checks in the UK
One free scan shows your age check, report routes and labels, with evidence and fixes.