Children spend much of their lives online, where services routinely collect information about them. Protecting children may require an organisation to know whether a user is under 18, yet age checks can require additional personal information. This article considers that tension under POPIA, focusing on age assurance, minimality, privacy by design, and child-friendly transparency.