Sharenting: Why Posting Your Kids' Photos Online Is Riskier Than You Think

Your child's face — permanently

Every photo you post of your child contributes to a growing record of what their face looks like at each age. That record does not disappear when you delete the post. Facial recognition systems extract a faceprint — a mathematical representation of facial geometry — before deletion occurs. A child photographed consistently from infancy through adolescence will have a more complete and durable facial recognition profile than most adults.

Their name, age, and location

Birthday posts — 'Happy 7th birthday, Emma!' — publicly confirm your child's name and exact date of birth. School uniform photos confirm their school. Location tags, backgrounds, and recurring venues in photos build a map of where your child spends time. Combined, these data points are sufficient for identity theft, targeted grooming, and building a convincing false identity in your child's name.

Family structure and home environment

Photos posted over time reveal your address from house numbers and street signs visible in backgrounds, your car, your neighbourhood, the layout of your home, and the names and faces of siblings, grandparents, and family friends. This information is visible not only to your followers but to any platform scraper or future data breach.

Behavioural and developmental information

Posts celebrating milestones — first steps, starting school, medical updates shared for sympathy, posts about learning difficulties or behavioural challenges — create a permanent record of your child's development. This information may feel private, but on a public or semi-public profile it is visible to insurers, employers, and anyone who scrutinises your child's history years later.

A searchable identity before they can consent

Children cannot consent to having their identity established online. By the time many children are old enough to understand what has been posted about them, years of photos, milestones, and personal details already exist under their name — shaping how they appear in search results, what data brokers know about them, and what facial recognition systems can identify them as.

Photos are scraped before they can be deleted

Major social platforms scrape and process photos for facial recognition within seconds of upload. Third-party scrapers — including companies like Clearview AI that built databases from billions of scraped public images — may archive the photo faster than a parent can change their mind and delete it. The window between posting and permanent collection is effectively zero.

Platform tagging systems label children by name

When a parent tags a child by name in a photo — or when the platform's auto-tagging suggests their name — a labelled faceprint is created: this face belongs to this named person. This labelled data is the most valuable kind for training recognition models and for linking records across databases.

Children's faces are used in AI training datasets

Multiple academic facial recognition datasets — later retracted following public outcry — were built entirely from photos scraped from public social media accounts, many of which included children. The photos were used without parental consent and the resulting models are still in use. There is no mechanism to retroactively remove a child's face from a model that has already been trained on it.

A growing faceprint follows them into adulthood

Facial geometry changes significantly from childhood to adulthood, but recognition models trained on a range of ages are increasingly able to track identity across those changes. A child whose face is extensively documented online may be identifiable in their adult life by systems trained on their childhood photos — without ever having consented to that identification.

Public social media feeds data broker databases

Data brokers harvest public social media posts at scale. A parent's public Instagram account featuring their child's name, school, and location feeds directly into these databases. The child's profile — name, approximate address, school, family members — is assembled from the parent's posts without any direct action from the child.

Birthday and milestone posts create identity records

Data brokers use name, date of birth, and location as primary identifiers. Parents routinely post all three — often in a single birthday post. This gives data brokers the core fields needed to create and maintain a persistent identity record for a minor.

These profiles persist into adulthood

A data broker profile created from childhood social media posts does not expire when the child turns 18. It accumulates new data and merges with adult records as the person grows older — often without their knowledge. Their first encounter with their own data broker profile may come when a background check surfaces information they did not know existed.

Children are targets for identity theft

Children's identities are particularly attractive to fraudsters because they start with a clean credit history and are unlikely to notice early misuse. A child's name, date of birth, and address — all commonly shared by parents online — are sufficient to open fraudulent accounts. Identity theft targeting minors often goes undetected until the child applies for their first loan or job.

Photos reposted to child exploitation networks

Publicly posted photos of children — including innocent bath time photos, holiday photos, and sports photos — are routinely harvested and reposted to networks where they are shared alongside explicit content. Perpetrators do not need to produce content; they harvest it from parents' public social media. The Internet Watch Foundation reports that a significant proportion of the child sexual abuse material they encounter originates from ordinary family photos reposted in exploitative contexts.

Location and routine data used for targeting

Posts that reveal a child's school, after-school activities, regular routes, and weekend routines provide enough information to locate and approach a child in person. This is not a hypothetical risk — it features in multiple documented grooming cases where the perpetrator gathered information from the victim's parents' social media before making contact.

AI image manipulation

Publicly available face-swap tools can take a real child's photo and generate synthetic explicit content using their face. This is a form of child sexual abuse material regardless of whether the original photo was innocent. The existence of detailed photo records of a child online — from multiple angles, over multiple years — makes this significantly easier to produce convincingly.

Fake profiles using your child's identity

Children's photos and names are used to create fake profiles — sometimes for fraudulent purposes, sometimes to impersonate the child in online communities the parents are unaware of. These profiles are harder to detect and report because the real child is unlikely to be searching for their own face online.

Embarrassing content they cannot remove

Photos and posts that seem harmless or endearing in childhood may be a source of significant distress in adolescence and adulthood. A child has no legal mechanism in most jurisdictions to compel a parent to delete content posted about them. In France, a law passed in 2024 gave children the right to sue parents for publishing photos without consent — but enforcement is rare and damages are difficult to prove.

A permanent record that shapes how others see them

Employers, universities, romantic partners, and acquaintances routinely search for people online. A young adult whose childhood is extensively documented — including vulnerable moments, health information, family conflicts shared for sympathy, and developmental struggles — may find that record shapes others' perceptions before they have a chance to present themselves on their own terms.

Loss of narrative control

One of the core aspects of adult identity is the ability to decide what to share, with whom, and when. Children whose entire childhood has been documented and shared online lose a significant portion of that control before they are old enough to exercise it. The stories told about them — in captions, in birthday posts, in milestone announcements — become part of a permanent record they inherit rather than author.

Digital kidnapping and identity theft risks persist

'Digital kidnapping' — the practice of taking a stranger's child's photos and reposting them as one's own — is documented and ongoing. A child's photos posted publicly today may surface in entirely different contexts for years or decades. The longer the exposure window, the greater the cumulative risk of misuse.