Age limits are social consensus, not a technical lock

A 13-year-old enters their real birth year on most platforms and the account flips to “adult” without further checks.

A child on Instagram below the AU under-16 threshold can still see public content with an account.

An SMMA-evaluation document from eSafety notes that circumvention among under-16s is documented [source: esafety-social-media-age-2026] [source: esafety-smma-2026].

The number that appears in an app store, in a regulator’s press release, or in a national law is a policy number.

It is set by a body that does not operate the platform. It is enforced (when it is enforced at all) by mechanisms the platform itself chose to build.

This article is about what age limits do, and what they do not do.

The wiki takes no position on whether the limits are right or wrong. The wiki’s job is to be honest about the implementation gap.

Myth

Age limits on social media, app stores and games are an effective protection for children.

The claim comes in two forms.

The first form says the limit itself protects children, because the platform will not let an underage child create an account or see adult content.

The second form says the limit is the start of protection, after which the platform’s safety features take over.

Both forms assume that the age number is enforced at the point it matters. The evidence base for this assumption is thin.

Evidence

Platforms treat the limit as a declaration, not a check

Most platforms treat the age field at signup as a self-declared value.

The platform may estimate the user’s age from a credit card, an ID upload, or a video selfie.

Where it does, the estimate is imperfect by design. The platform’s business model rewards throughput over rejection.

eSafety’s SMMA evaluation reports that circumvention is documented among Australian under-16s [source: esafety-smma-2026].

eSafety’s parent-facing explainer states that public content remains viewable without an account on services covered by the age restriction [source: esafety-social-media-age-2026].

The UK Ofcom “Age checks to protect children online” explainer describes the same gap.

Age assurance, in Ofcom’s framing, is a set of methods the regulator can require. It is not a single lock the user encounters [source: ofcom-age-checks].

Apple, Google, Microsoft propagate the declared age

Apple’s Family Sharing and Declared Age Range framework treat the age on the parent’s Apple Account as a value the platform trusts.

Once declared, the value propagates to the App Store, to third-party apps that read the Declared Age Range API, and to game platforms that gate features by it.

Set it wrong on day one and the wrong value reaches every app later, without the parent touching the setting again [source: apple-age-range-support] [source: apple-region-rules].

Google’s Family Link and Microsoft’s Family Safety follow the same shape.

The age is the gate. The gate is enforced by the parent’s account at the moment of declaration. It is not enforced by an independent verification at the moment of access.

The numbers themselves are jurisdictional, not technical

GDPR Article 8 lets every EU member state set its own digital age of consent between 13 and 16. The default is 16.

Germany sits at 16. Austria at 14. The UK at 13. The US (COPPA) covers under-13 with parental consent as the rule.

A single “age 13” rule, read across jurisdictions, is four different legal ages with four different rule bodies behind them [source: euconsent-gdpr-art8].

The numbers are social consensus. They reflect what each society is willing to call “old enough to consent”. They do not reflect what a platform can technically verify.

The number does not stop viewing

An under-13 who downloads an app store app rated 17+ will see the rating gate.

They will not, however, be prevented from opening the app on a device whose account-level age they have already misdeclared.

Apple’s Family Sharing has a separate “Ask to Buy” workflow, but it depends on the parent-side account being the gatekeeper.

Once a child turns 13 in the US, Ask to Buy ends [source: apple-family-kids].

On Google’s side, the equivalent transition depends on the jurisdiction and the account type.

Family Link supervision transitions to “teen” or stops at the age the country’s law sets. A teen account’s parent-side controls loosen.

On Microsoft, Xbox and Microsoft Store have similar jurisdictional transitions.

The pattern is the same: a transition date, and a partial automatic loosening of controls.

The limit does not stop private messaging

Most social platforms with an age limit of 13 or 16 still allow private messaging for users who misdeclared or who used a slightly older sibling’s account.

Direct messages, group chats, and friend requests are the contact vector for grooming and sextortion. The platform’s age limit does not address them at the technical level.

The evidence on grooming is in the wiki’s glossary and on the talking-about-it page. The numbers are in the the-4cs-of-online-risk article.

The limit does not stop algorithmic exposure

A 12-year-old who lies about their age on a video app and uses it for six months has trained a recommender system on their behaviour. The system does not retroactively correct.

Self-harm content reaches 34.5% of English 11–18-year-olds in a single month, with 66% of that exposure happening via algorithmic feeds rather than search.

This figure is documented in the the-4cs-of-online-risk article and the underlying OxWell 2025 survey cited there.

The age limit, set at signup, does not change what the recommender surfaces later.

The limit does not address device-level controls

A platform age limit applies to the platform. It does not apply to the router, the operating system, the family Wi-Fi, or the device passcode.

A family that relies only on the platform’s age gate has no defence when the child uses a friend’s device, a school device, or a console that has its own age gate.

Internet Matters’ parental controls hub and the wiki’s what-parental-control-apps-can-do article cover the device-level layer.

Sources

Each marker resolves to a stub under Wiki/sources/ with the URL, the retrieval date and the licence.

• esafety-social-media-age-2026 — eSafety Commissioner, “How do the social media age restrictions affect me?” (2026). The AU explainer that documents what the under-16 restriction does and does not do [source: esafety-social-media-age-2026].
• esafety-smma-2026 — eSafety Commissioner, “Early days, early insights: SMMA evaluation, three months” (2026). The AU under-16 circumvention survey [source: esafety-smma-2026].
• ofcom-age-assurance-2026 — Ofcom, “Use of Age Assurance Report 2026”. The UK statutory report on age-assurance methods [source: ofcom-age-assurance-2026].
• ofcom-age-checks — Ofcom, “Age checks to protect children online” (2026). The parent-facing explainer on age assurance [source: ofcom-age-checks].
• apple-age-range-support — Apple Support, “Declared Age Range” (2026). The Apple framework that propagates a declared age to third-party apps [source: apple-age-range-support].
• apple-region-rules — Apple Support, “About Media Services & Apple Store features that vary by region or locale”. The Apple regional age-gate documentation [source: apple-region-rules].
• euconsent-gdpr-art8 — euconsent.eu, “Digital age of consent under the GDPR” (2021). The member-state breakdown of GDPR Article 8 [source: euconsent-gdpr-art8].
• esafety-resources — eSafety Commissioner, “Parent resources” (AU). The Australian government parent hub [source: esafety-resources].
• internetmatters-internet-matters-controls — Internet Matters, “Parental controls and privacy settings guides” (UK). The device-level controls hub [source: internetmatters-internet-matters-controls].
• doi-core-4cs — Livingstone and Stoilova, “The 4Cs — Classifying online risk to children” (CO:RE Short Report, 2021). The taxonomy that places platform age limits in the broader risk frame [source: doi-core-4cs].
• apple-family-kids — Apple Support, “Family Sharing overview for kids and teens”. The Apple age transitions for Ask to Buy and family-organiser control [source: apple-family-kids].