01
Attestation from your wallet
An AAP issues an age attestation into your wallet. It stays there.
Privacy by design. Not by policy.
We don't collect personal information — because the product is built to not need it. Here's exactly what that means.
The no-PII policy
Nothing to collect. Nothing to lose.
No nameNothing to identify you.
No emailNo signup, no newsletter.
No phoneNo contact forms.
No addressNo shipping, no billing.
No payment detailsPayment happens in your wallet.
No accountsNothing to log in to.
What this site collects, stores, and logs
Nothing of yours — no name, email, phone, address, or payment details, in any form, widget, or flow. No forms, no third-party trackers or analytics, no advertising or social pixels, no cookie that collects personal data. No logging of personal data. Identity comes only from your wallet (the PIC).
See the data principles →How your age is proven
An attestation, not an exposure
02
You release just the claim
You approve an age claim (e.g. "18+"). That is the only thing a site ever sees.
03
The merchant verifies the claim
The AVP verifies the attestation and returns an auditable result. We never see your identity.
Hosting & TLS
Static pages, encrypted everywhere
HTTPS everywhere
All traffic is served over TLS 1.2+ with HSTS. No unprotected requests. Posture is confirmed by the AVS CTO & Security teams before go-live (JAL-46).
Static JAMstack
Self-contained informational pages served from a CDN/edge. There is no server-side personal data to store, leak, or breach.
Self-hosted assets
Fonts, styles, and scripts are served from this site only. No third-party network requests are made by these pages.
Cookies & trackers
No cookies that collect. No trackers. No third-party requests.
This site uses no cookies that collect personal data and no third-party trackers. We do not use advertising, analytics, social pixels, beacons, or embedded widgets. There is no cookie-consent banner because there are no cookies to consent to.
No analytics
No Google Analytics, no Segment, no server-side analytics that could associate requests with people.
No social pixels
No Meta/Facebook/TikTok pixels, no share widgets, no referral or "share to win" flows.
No forms
No newsletter, no contact form, no signup. The only actions are outbound links to the wallet store, docs, and SDK repositories.
Legal / terms
Informational site terms
aithne.online is an informational site about age verification. It does not provide legal advice. The AVP/PPIL service itself is governed by the merchant contract. Warranty and liability terms for that service are set out there, not here.
Regulatory requirements for age verification vary by market and change over time. Statements here describe how Aithne is designed and are provided as context — they are not a certification or an approval. Consult legal counsel for your market before relying on any age-verification approach.
Compliance-relevant copy (hosting, TLS, cookies, security posture) is reviewed with the AVS CTO and Security teams before go-live.
Data principles
- No collection. No name, address, payment info, email, or phone is collected on any page, widget, or flow.
- No storage. There is no account system, no newsletter, and no contact database.
- No logging of personal data. Diagnostics never capture identity data; secrets are masked in any diagnostic output by the PPIL clients (
maskSensitive). - Outbound-only conversion. Wallet store, docs, and SDK repository links are the only conversion actions.