Who scanned your face, and where it went.
Age-check laws made apps scan faces. Scanback records which apps do it, with which vendor, and whether the face leaves the phone, for licensed Illinois privacy firms.
- Be first in line
- One email, when we open
- No spam
- Running test-account age checks0%
- Logging calls to face vendorsQueued
- Diffing BIPA notices dailyQueued
- Sorting on-device from serverQueued
- Tracking arbitration clausesQueued
Maps which apps scanned faces for age checks, and builds the Illinois privacy case file.
Age-check laws made the internet scan faces, and Roblox now asks for one before chat. Scanback runs real checks with test accounts and records each app’s vendor, where the face is processed and what consent was shown. Licensed Illinois firms buy the map and an intake tool, and they bring every claim, never Scanback.
- Step 01
Runs real age checks with test accounts
Consenting adult staff pass each app’s face check while agents screen-record it and log which vendor’s servers receive the images.
- Step 02
Tests where the face is processed
Each app gets the control test from G.T. v. Samsung. If the face stays on the device or no template is made, the ledger says the claim fails.
- Step 03
Gives firms the ledger and an intake
Licensed Illinois firms get the Face Ledger and a white-label intake where residents, or parents for minors, prove residency and that they were scanned.
Built for licensed Illinois privacy and mass-arbitration firms.
The Face Ledger
A live map of apps running facial age estimation or selfie ID: vendor, processing location, notice, release, retention policy and date.
Recorded evidence for every entry
Screen recordings of real checks and the network calls to each vendor, captured by agents with test accounts.
A white-label intake
Illinois users, or parents for minors, prove residency and that they were scanned, under your firm’s name.
First up: We open with a free public index of who scans your face across the top 50 apps.
The world just changed.
What changed, and where it was reported.
Roblox announced that every user who wants chat must pass a facial age check. Persona processes the images, which Roblox says are deleted immediately after processing.
RobloxAAA data: 92 mass arbitrations with about 280,000 individual claims were filed in 2024, and BIPA is one of the statutes most used in them.
Privacy WorldBIPA now pays one recovery per person, $1,000 negligent or $5,000 intentional or reckless. The 7th Circuit held in G.T. v. Samsung that it does not reach data that stays on the user’s device.
Mayer Brown
One person and 4 AI agents.
The agents, all day
- Running test-account age checks
- Logging calls to face vendors
- Diffing BIPA notices daily
- Sorting on-device from server
- Tracking arbitration clauses
What a person does
Licensed Illinois lawyers decide every claim, sign every demand and own client contact. An outside ethics lawyer clears our flat-fee model before the first sale, and our test scans use consenting adult staff only.
BIPA lets Illinois residents sue, and licensed lawyers bring each claim in the forum the app’s terms chose. We take only real Illinois residents who were really scanned, drop on-device and no-template cases, accept no pay per signed client and send no demand letters.
Do you file claims or represent anyone?
No. Licensed Illinois lawyers decide every claim, sign every demand and own client contact. Scanback sells them a map and software for a flat fee, never a share of a case or pay per signed client.
What if the scan never left the phone?
Then the ledger says so. After G.T. v. Samsung, data that stays on the device may fall outside BIPA, and an app that makes no face template gives no claim. We mark those apps honestly.
Isn’t this suing over child safety?
No. Age checks can stay. The question is consent: whether people got notice, signed a release and were told how long their face data is kept. Minors’ claims go through parents, and their data gets child-grade care.
Be first through Scanback’s door.
- Be first in line
- One email, when we open
- No spam