Assuming they can access that other information, which they absolutely can't right now and would require a whole thing between them and the other companies to make possible assuming the other companies are allowed to make those channels available and would be inclined to make it possible.

Thing is:The whole consumer data market is so hush hush because all laws are(Deliberately) behind technological growth regarding transparency of such.

So no one really knows anything but companies.

& if you don't think the governments will find a way to over-expand the coverage of laws that trigger this kind of thing beyond alleged limits, let alone not have your data regardless of the laws passed, either you've been not paying attention or don't seem to realize that most companies & governments already have/can access your info if they cared(even if they aren't allowed to) ESPECIALLY intelligence/Military orgs, payment processors & banks, and anybody you affect the stock price of.

This whole shebang merely checks a box to technically comply w/said laws, which can not & will not protect kids, & instead are adults trying to maintain the status quo in favor of the same rich people who push for this kind of thing to Dubai/Riyadh-ify their countries so they & their bloodlines can have slaves do all of the inconvenient things that they were told AI can't do for them.

Quote from Kinzai >>

I absolutely refuse to provide this information. Especially since I log in through my Google account. My Google account that is older than this site. Purchases that I've made through my PayPal. PayPal, an online banking exchange site. Both of which are evidence of my age. DnDBeyond does not, under any circumstance, require either my age or my location. And to suggest or demand such information is utterly abhorrent to my, and everyone else's privacy. And the day that becomes mandatory is the day I cut my subscription.

 You have this kind of response when you have been using Google for at least a decade? Your Google account, which has harvested and sold every intimate secret of your personal life at bargain prices? It seems weird to me that you are throwing up such a strong response over a date of birth that has no requirement to support with evidence of any kind, while you have been using one of the biggest data miners in history, likely on a daily basis. 

Quote from Erik_Soong >>

Quote from Kinzai >>

I absolutely refuse to provide this information. Especially since I log in through my Google account. My Google account that is older than this site. Purchases that I've made through my PayPal. PayPal, an online banking exchange site. Both of which are evidence of my age. DnDBeyond does not, under any circumstance, require either my age or my location. And to suggest or demand such information is utterly abhorrent to my, and everyone else's privacy. And the day that becomes mandatory is the day I cut my subscription.

 You have this kind of response when you have been using Google for at least a decade? Your Google account, which has harvested and sold every intimate secret of your personal life at bargain prices? It seems weird to me that you are throwing up such a strong response over a date of birth that has no requirement to support with evidence of any kind, while you have been using one of the biggest data miners in history, likely on a daily basis. 

 
This argument isn't really very helpful. A person can want stronger data privacy protections and yet still have reasons to use services that hoover up data. You can contribute to a system, be unhappy with all parts of that system, and also realize that your individual action is insufficient to change that system. That's not really a gotcha. That's just life being complicated.

Quote from LaTiaJacquise >>

Hey all, popping back in here to clear at least one thing up: this is not in response to Australia's social media ban for under-16s. Putting stuff like this in place takes longer than whatever that news timeframe was. Personally, I wasn't even aware of that until late last month.

A lot of you have already hit the nail on the head with why this is happening now on DDB, which I'll reiterate here: we're joining the many other websites on this great wide internet in age verification to comply with laws that are being rolled out across the world. No one particular part of the world is the cause for this.

Last thing I'll say is that you're allowed to feel how you feel about the wider reasons that things like age verification are now required, but you're still also required to abide by the rules of the site and the forums. I don't want to have to lock the thread, so maybe take a step back, cool down, and keep it civil.

 
LaTia, I've been a big fan of yours since your were with the folks at Monte Cook Games. I respect you immensely.

However, I cannot be civil about age verification. In order to verify my age for somebody else, I must also verify it for myself. That imposes unacceptable mental anguish on me, as it likely does for all of us who believe that the 90s ended about a decade ago.

Quote from Kinzai >>

I absolutely refuse to provide this information. Especially since I log in through my Google account. My Google account that is older than this site. Purchases that I've made through my PayPal. PayPal, an online banking exchange site. Both of which are evidence of my age. DnDBeyond does not, under any circumstance, require either my age or my location. And to suggest or demand such information is utterly abhorrent to my, and everyone else's privacy. And the day that becomes mandatory is the day I cut my subscription.

 While either Google or PayPal could choose to run their own ID verification service, as could a number of other businesses D&D Beyond works with, such as credit card companies, as far as I can tell they don't... and you probably don't want them to, either. Without that, D&D Beyond either needs to collect the information themselves, or find a third party that does offer that service, and they chose the latter.

Thanks for the update, LaTia. I did a quick look but I didn't find anything - what are the disruptions for folks who don't want to enter the info (or I guess folks who took a computer cleanse and don't plan to log back on until sometime in February)? Will they lose access to all of DDB? Just the forums? Something else? Apologies if I missed this somewhere and there's already a link to clarify those questions.

As someone who is glad to relax because it's not his weekend to be on call I 100% understand. Thanks, LaTia!

 [Redacted]

Not that anybody cares, but the difference between being carded and what we're dealing with online is that a typical bouncer at a bar isn't a meaningful data security threat. Any online platform has the potential to be breached, in which case stored PII can fall into the hands of bad actors. Is it likely to be a serious issue in this case? No, but I don't know your threat model.

What can someone do with those two pieces of information that doesn't involve an active and involved search for other key data? They're not asking for your SSN, a picture of your ID, or anything else with truly substantive information. Can anyone here explain how a birthdate and country provide a useful lever in conjunction with an email address and possibly a password?

What is bothering me about it now, is I've filled it out.  But the stupid notification keeps popping up.  I did what they wanted stop pestering me about it now. 

Quote from Deyric >>

What is bothering me about it now, is I've filled it out.  But the stupid notification keeps popping up.  I did what they wanted stop pestering me about it now. 

 
Banners not going away after their use is a longstanding D&D Beyond glitch that particularly occurs whenever they are doing site maintenance (as they are right now).  It is simply a longstanding problem that occurs on banners of many types, and not an attempt to pester you.  No reason to get bothered over it.

[Redacted]

Quote from The_Ace_of_Rogues >>

 What can someone do with those two pieces of information that doesn't involve an active and involved search for other key data? They're not asking for your SSN, a picture of your ID, or anything else with truly substantive information. Can anyone here explain how a birthdate and country provide a useful lever in conjunction with an email address and possibly a password?

 
As I mentioned earlier, it’s unlikely that the measures on Beyond will cause a direct issue. However, the possibility of harm can never be ruled out—the answer is always “yes.”

The more personal data we have about a user, the easier it becomes to cross‑reference that profile with other leaks. Imagine a DDB breach reveals that the account Gnomarchy belongs to an 82‑year‑old woman in Tanzania. On its own, that isn’t very useful. But if another breach links an 82‑year‑old Tanzanian woman to a specific email address, and yet another leak ties that email to a credit‑card number, the pieces start to form a comprehensive dossier.

This chain reaction is hard to predict, but the principle remains the same: more data in the hands of an online platform lowers the barrier for hostile actors to build detailed profiles. It doesn’t require sophisticated, targeted hacking. A single breach—say, a bank’s database dumped on the dark web—can give countless bad actors enough material to identify and exploit individuals, even if they weren’t specifically looking for that person’s data.

The situation mirrors the guidance given to professionals handling sensitive government or national‑security information. A record might not be overtly damaging on its own, yet it can still be classified if its disclosure creates an unacceptable risk—namely, the ability of an adversary to combine it with other data and generate a security threat.

The best technique for risk management is simple: platforms should collect only the data essential for delivering their services. Unfortunately, because user data is a valuable commodity, many platforms lack incentives to adopt stricter data‑minimization practices—especially when the penalty for a breach is often just a slap on the wrist. Consequently, it falls to consumers who care about privacy to make their preferences known and demand better protection.

All the more reason to contact your elected representatives in your country, state, province, etc. This is outside pressure being exerted on Hasbro and many other companies by new legislation passed or being passed in about half of US states and several other countries around the world. The trojan horse to get these laws passed is a "think of the children" rationale for forcing age check requirements on graphic adult websites. But these laws are pushed by the same politicians who classify any and all books, movies, TV, and other forms of entertainment and communication that feature realistic, non-critical representation of LGBTQ+ people as "graphic, adult material."

So y'all can keep taking your frustrations out on DDB, WotC, and Hasbro, but you're only going to see these age verification requirements pop up on more websites unless you reach out to your elected officials and demand change (and tell them you'll vote for someone else if they don't start working against these laws).

I do not think D&D Beyond is a place to discuss politics, but I am seeing a lot of posts essentially dismissing the nexus between D&D Beyond and the recent global legislations.  Without commenting on the actual efficacy or my personal beliefs on the laws, or any of the political nature of the laws themselves, I did want to provide a different, factual background that folks should at least keep in the back of their mind.  To be clear, the goal of this post is not to start any political discussion - and I am not going to engage in any, even if baited - but merely inform individuals about an issue that is flying under the radar and directly implicates D&D Beyond in a way I do not believe most realize. 

I do a lot of work on cases involving child trafficking and abuse, and probably deal with things on a daily basis more horrifying than most folks on D&D Beyond are capable of imagining.  In the field of human trafficking, the largest rise we are seeing used by individuals seeking to exploit children, for anything ranging from inappropriate conversations and pictures to actual trafficking, is on gaming websites, forums, and MMOs - pretty much any gaming related site with a social component.

Why is that?  Parents have been warned about the dangers of places like Facebook for years and years, but many of them - even ones who are otherwise pretty savvy about their internet usage, do not think about the social component of a place like Discord, D&D Beyond, etc.  These are often sites where the primary purpose is something other than the social component, so parents might not fully register the same exact dangers from places like Facebook can exist.  Gaming sites also tend to have a fairly high density of individuals that are a bit socially awkward, lonely, or otherwise vulnerable - not that the perception of all gamers as shut-ins are accurate, but that subsection of our community does exist. To an individual who preys on children, that makes gaming sites a perfect hunting ground - relatively low parental oversight and a higher rate of potential victims. 

I would love to say that D&D Beyond is different from major social media sites.  Would love to believe there is no need for protections on this fun little site about playing D&D.  But I cannot.  And, from professional experience, I look at places like Adohand's Kitchen - an insular community, skewing underage, where individuals regularly post about their insecurities and desire to make human connections - as (due to no fault of Wizards) an extremely likely target for predators. 

So, maybe before we be a bit dismissive of the nexus between these kinds of laws and D&D Beyond, we should at least consider there are other perspectives and risks - and that the reasoning of "D&D Beyond is probably not a threat" dismissal is a significant part of the reason D&D Beyond is the exact kind of site predators would be inclined to target.