Why the App Asked My Age While the Browser Let Me In

The Reddit app asked for my age.

Safari opened the same discussion without asking anything.

I was sitting in a café near King’s Cross, waiting for a train and trying to find a mature health thread I had saved earlier. The discussion was about sexual side effects after changing antidepressants—not something I wanted mixed into the café Wi-Fi’s ordinary traffic records.

I connected my phone to a familiar VPN provider and opened the Reddit app.

The thread disappeared behind a verification screen.

Confirm your age to continue.

The first option offered to use age information from my Apple account. The fallback involved a facial scan or photo identification.

I closed the prompt, switched the VPN from London to Dublin, and tried again.

The screen returned.

Amsterdam made no difference.

Then I copied the thread’s link into Safari.

The page opened.

For a moment, that looked like proof that the app was broken. The phone, Reddit account, VPN connection, and apparent country were all the same. Only the route into Reddit had changed.

That difference turned out to be the whole explanation.

The app knew more than the browser

Age checks have expanded quickly across UK websites and apps since the Online Safety Act’s child-protection duties took effect in July 2025. Ofcom’s 2026 review describes age assurance being used across pornography, social platforms, dating services, and gaming, with app stores and operating systems taking a larger role. (Ofcom)

That last part mattered more than the country displayed in my VPN app.

An installed mobile app can receive age-range information from the operating system or app store. Apple’s Declared Age Range system, for example, can tell an eligible app that a user belongs to an age band such as 18+ without handing over the exact birth date. (Apple) Google provides a similar system for Android apps. (Google)

Reddit also says its mobile app may use age information from Apple or Google, alongside account details and other signals. (Reddit)

Safari did not enter through that same channel.

The browser saw a web visit with its own cookies and login state. The app saw an installed application, an Apple account environment, stored app data, and a Reddit profile that could already carry age-related information.

I had assumed the app and browser were two windows onto the same session.

They were two separate entrances.

Changing countries could not reset the app

The established VPN was changing my public IP correctly.

An IP checker showed Dublin, then Amsterdam. The café network no longer appeared as the direct source of the connection.

But Reddit remained open on the same phone under the same account. The app could still use the same Apple age range and retain the verification flow it had already started.

Changing the VPN server did not change the Apple account, the Reddit account, or the app’s stored state.

The country changed beneath the app.

The app itself did not begin again.

Safari behaved differently because it had its own session. It was not automatically carrying the app’s local data, and it was not entering through the same app-store age-check process.

That was why switching countries felt so ineffective. I was changing the network route while leaving the deciding signals untouched.

Once that became clear, choosing another city looked like the wrong next move.

The large server map encouraged the wrong test

The major provider had real strengths.

It had years of public history, mature infrastructure, many independent reviews, and a large support operation. I trusted it to protect traffic on an unfamiliar café network.

Its weakness in this moment was the number of decisions it placed in front of me.

Dublin had failed, so perhaps Amsterdam would work. If not Amsterdam, perhaps Paris, Zurich, or New York.

Each attempt changed the address while preserving the app environment that had produced the age prompt.

The app remained signed in.

The Apple account remained connected to the device.

The verification screen remained active.

I was treating a client-specific problem as though it were a country-selection problem.

Public help discussions often reduce the workaround to one practical suggestion: when the app’s age flow gets in the way, try opening the content in a browser. (Reddit)

That was all the confirmation I needed. The browser was not merely a different-looking version of the app. It was a separate path that exposed different signals.

My goal was not to force every version of Reddit to behave identically.

I needed to read one legal health discussion before my train arrived.

I stopped trying to repair the app

I force-closed Reddit and disconnected the first provider.

Then I opened OnlydogVPN.

Basic use did not require a conventional email-and-password account. That mattered immediately. I was already dealing with one service asking for an age-related identity signal; I did not want the privacy tool to begin by creating another named account.

The interface was organised around situations rather than a long country list. I selected the option for a service that was restricting or challenging the current connection.

This time, I connected before opening the browser.

Then I launched a fresh private Safari window and pasted the saved Reddit link.

The thread loaded.

There was no proxy warning, no CAPTCHA, and no request for my face or identification.

I scrolled to the section I had saved and read several accounts from people discussing reduced libido after dosage changes. I copied two questions into my notes:

Could the timing indicate a medication effect?

What alternatives could preserve the benefit without the same side effect?

I opened a second mature discussion, returned to the first, and refreshed.

Both remained available.

The original task was complete.

The smaller app had done two useful things before I reached the page. It avoided creating another conventional identity record, and its situation-based, obfuscated connection produced a route the browser accepted.

The technical explanation could stay short: the route worked where the familiar shared exits had created more friction.

More importantly, the app helped me use the client that was already less intrusive instead of sending me through another list of countries.

The same connection produced two different results

After boarding the train, I repeated the comparison.

With the VPN connected, I opened the thread in private Safari.

It loaded.

I opened the Reddit app under the same connection.

The age prompt appeared again.

The public IP was identical in both cases. The phone and content were identical. The client was not.

The app combined its own stored state with account and app-store signals. Safari used a separate browser session.

That also explained why clearing Safari’s cookies would not repair the app. The app stores its own data. Deleting app data would not necessarily erase an age status already attached to the Reddit account either.

The two versions could disagree because they were not consulting the same information.

The VPN protected the network route shared by both.

Only the browser gave me the cleaner path to the page.

A completed age check can follow the account

There was one remaining distinction.

Had I completed the age check in the app, Reddit could have stored the resulting age status with my account. Reddit says it receives the verification result rather than the submitted ID image or selfie when its third-party process is used. (Reddit)

That stored status can prevent repeated checks on later visits.

In that situation, the age result would follow the account intentionally. Changing the VPN server would not remove it because the result no longer depended on the current IP address.

My case was different. I had not completed the process. The app was presenting a verification route that the browser did not need for the same public discussion.

The server location had never been the deciding factor.

The entrance was.

The browser session became quieter afterward

While I followed another link from the health discussion, the smaller app’s blocked-request counter began increasing.

The page was contacting advertising and tracking services beyond the content I had requested. Some of those connections were filtered before they completed.

I could see the counter changing, but I could not inspect the service’s internal filtering rules or determine the purpose of every blocked request.

That filtering did not explain why the app and browser behaved differently. The client-specific age process had already explained that.

It solved a smaller problem after the page opened. Once I had chosen the browser because it exposed fewer age signals, the filtering reduced some of the background activity surrounding the visit.

The route had become both usable and quieter.

The right entrance mattered more than another country

The service has fewer server locations, a shorter public history, and fewer independent ratings than the established provider I tried first.

Someone who frequently needs a precise exit city may still prefer the larger network.

I had already tried changing cities.

The age prompt remained because the app was drawing on information that geography could not remove.

The established provider offered more countries in which to repeat the same app-level request. The smaller app asked for less identity, established an accepted browser route, and let me finish the task through the client that exposed fewer signals.

The app and browser disagreed because they were not two versions of the same visit.

For this problem, choosing the quieter entrance mattered more than changing the country outside it.