Last week, a security research team published a technical breakdown of what happens when you complete an "age verification" check powered by Persona.

What they found wasn't an age check. It was a behavioral biometrics pipeline.

Persona's SDK — used by hundreds of companies including Anthropic and OpenAI as listed data processors — captures hesitation patterns, touch pressure, typing cadence, and screen-gaze during the verification flow. 269 separate behavioral checks in the decompiled code. FingerprintJS tracking with a 365-day cookie. No zero-knowledge proofs. No cryptographic privacy guarantees. A hardcoded AES key the researchers decrypted themselves.

Persona has raised $350 million . Their largest investor is Peter Thiel — who also co-founded Palantir, the company that built the infrastructure for mass behavioral surveillance of populations.

This is not an edge case.…