secrec It could be as simple as proving a captcha, iff (if and only if) the intention is only checking for age. Now, the real solution also depend on how strict this verification is expected to be, but say, a passcode-like solution doesn't have to be about the entire individual. That said, I get that in reality this is being used for collecting way more than that.