Follow one player’s account from signup to subpoena.
You are the trust & safety lead of a game studio. In the next three minutes you will admit a young player without collecting their identity, watch a predatory approach get caught as the pattern forms, and hand a court a record that proves itself.
Everything cryptographic in this demo — the hashes, the chain, the sealed record, the verification — is computed live in this browser. Try to break it at the end.
Simulation notice: the player, the messages and the detection verdicts are scripted for this demo. The live Assurance service uses behavioral models with human review — its dated verified-behavior logs are at candortrustandsafety.com. The hashing, chaining, sealing and verification here are real WebCrypto.
Module 1 | Ceremony™
Age assurance & guardian consent — without an ID drawer
A 13-year-old wants to join your game’s community space. Watch what gets established — and what never gets collected.
🎮
Player begins signupNew account request for the community space of Nebula Raiders (a fictional game).
🛡️
Age established — no documents storedA privacy-preserving age check yields a proof of age band. The platform learns “13–15” — not a name, not a birthdate, not an ID scan.
✍️
Guardian consent, cryptographically boundA guardian approves. The approval is signed and bound to this account — verifiable later, deniable never.
✅
Account admitted to the youth spaceEvery event above was appended to the compliance ledger the moment it happened.
What the platform stored
- age-band claim (13–15) - proof reference (hash) - guardian-consent signature - timestamps, in the ledger
What the platform never saw
- name or birthdate - identity document - guardian’s identity document - anything a breach could leak
Module 2 | Assurance™
An adult is working the youth space
Account Rex_2007 claims to be 15. You control what Rex says — pick messages below and watch the screening respond. Benign chat stays free. Patterns get caught as they form.
Messages held, review case queued for your moderators. A flag never bans — the model surfaces, a human decides. Every hold and every signal is already in the ledger.
Module 3 | Ledger™
Every decision, hash-chained as it happened
This is the actual ledger this demo has been writing since the signup — each entry’s hash is computed from its content plus the hash before it. Change anything, anywhere, and the chain visibly breaks.
Module 4 | Evidence Preservation™
Sealed for the day a court asks
The held messages, the named signals and the decision trail get encrypted into a tamper-evident record in your vault — the studio holds the key, not Candor. The platform can still prove the record is intact without ever opening it.
Encrypted record (AES-256-GCM, encrypted in this browser just now)
Six months later
A court orders production of the record
Anyone — the studio, an acquirer, opposing counsel — can verify the record independently: recompute the digest, walk the chain. Verify it. Then try to tamper with the past and verify again.
Now try to rewrite history
Pick a cover-up. The demo will really apply it to the stored data — then verify again.
The Candor Catalyst Collection
Trust is earned. We help you prove it.
One bundle carried that decision through its whole life: who entered and with what consent, what was detected and decided, and evidence that proves itself — to you, to an acquirer, to a court — without trusting Candor.
Ceremony™Age assurance & guardian consent — prove the age, not the person
Assurance™Detects adults targeting minor spaces — human-gated, a flag never bans