Legal
Cookie Policy
Clutch5 Beta Terms — Version 1.2
This Cookie Policy explains how Clutch5 uses cookies and similar technologies on the Clutch5 website, web application, and installed web experience. Read it together with our Privacy Policy and Terms of Service.
The table below reflects the application source code. It has not yet been verified against the deployed site in a browser, and Clutch5 will confirm the live cookie set before public launch.
1. What Cookies and Similar Technologies Are
A cookie is a small piece of data that a website asks your browser to store and send back with later requests. Cookies are used for purposes such as keeping you signed in, remembering settings, protecting against fraud and bots, and measuring use of a service.
Clutch5 also uses technologies that are not technically cookies but serve related functions: service workers and push-subscription storage. This Policy refers to all of these as “cookies and similar technologies.”
2. Technologies Clutch5 Uses
Clutch5 uses only necessary or functional technologies for the Service when the corresponding features are active. We do not use advertising cookies, cross-site behavioral tracking, or third-party analytics on the Clutch5 domain.
The exact cookie names and provider behavior can change as browsers and service providers update their systems. Before public launch, Clutch5 will verify the deployed cookies in browser developer tools and keep this table consistent with the live Service.
| Name / type | Set by | Purpose | Category | Typical duration |
|---|---|---|---|---|
clutch5_session |
Clutch5 | Keeps you signed in and protects authenticated requests. Sent as HTTP-only, SameSite=Lax, Path=/, and marked Secure when the Service is served over HTTPS. The cookie holds a session token; the server stores only a cryptographic hash of that token. |
Strictly necessary | Up to 90 days |
| Service worker and push subscription | Clutch5 / your browser | Enables Web Push notifications that are opted into and supports installed-web-app functionality. The service worker is registered only when you enable notifications. | Functional | Until unsubscribed or cleared |
| Cloudflare security cookies, if enabled | Cloudflare | May be used for bot detection, DDoS protection, or security challenges when Clutch5 uses Cloudflare security features that require them. | Strictly necessary | Controlled by Cloudflare and the security feature used |
clutch5_session is the only cookie Clutch5 itself sets.
The short-lived, single-use state that protects the Google sign-in flow against forgery is not a cookie. It is stored server-side and associated with the login request, and it is invalid after use or after a short period.
Clutch5 does not store interface state or preferences in browser local storage or session storage.
Blocking strictly necessary cookies can prevent sign-in or other account features from working. Clearing site data may remove installed-web-app state or notification permissions.
Stripe-hosted pages
If you subscribe or manage billing, Clutch5 uses Stripe-hosted Checkout and the Stripe-hosted Customer Portal. When you leave Clutch5 for a Stripe-hosted payment or billing page, Stripe may set cookies such as __stripe_mid, __stripe_sid, or other security and fraud-prevention cookies on Stripe-controlled domains under Stripe’s own policies.
Those Stripe-hosted-page cookies are not Clutch5-domain cookies. If Clutch5 later embeds Stripe payment components directly on clutch5.app, we will update this Policy before deploying that change.
3. Google Sign-In
If you choose “Continue with Google,” your browser is redirected to Google. Google may use cookies on Google-controlled domains under Google’s own policies. Those are not Clutch5 cookies and Clutch5 does not control them. After authentication, Google returns your browser to an authorized Clutch5 callback URL.
4. Email Sign-In
If you sign in with your email address instead of Google, Clutch5 emails you a short-lived, single-use six-digit code. That flow sets no cookie of its own beyond the session cookie described in Section 2 once you are signed in. The message is delivered by a third-party transactional email provider and contains no tracking pixels. See the Privacy Policy for details.
5. Stripe and Payments
If you choose to subscribe, Clutch5 may redirect you to Stripe-hosted Checkout. If you manage billing, Clutch5 may redirect you to Stripe’s hosted Customer Portal.
Stripe processes payment information and may use cookies or similar technologies on Stripe-controlled pages for payment processing, fraud prevention, account security, and related purposes. Stripe’s use of those technologies is governed by Stripe’s own terms and privacy policy.
Clutch5 does not place Stripe advertising or behavioral-tracking cookies on the Clutch5 domain.
6. Third-Party Links
Clutch5 links to broadcasters, streaming platforms, leagues, teams, prediction-market services, and other third parties. Once you follow a link, that service may set its own cookies and collect data under its own policies. Clutch5 does not control third-party sites.
7. Analytics, Advertising, and Consent
Clutch5 does not use:
- third-party analytics (such as Google Analytics);
- advertising cookies or pixels (such as Meta Pixel);
- session replay or heatmap tools;
- cross-site behavioral advertising trackers; or
- data-broker technologies.
If Clutch5 adds any non-essential analytics, advertising, or tracking technology, we will update this Policy and the table above before the technology is deployed and will provide a consent or opt-out mechanism where required by applicable law.
8. Your Choices
You can control cookies and storage through your browser settings, including blocking or deleting cookies, clearing site data, and revoking site permissions. Blocking necessary cookies or clearing site data may sign you out or prevent features from functioning.
You can manage push notifications through your browser or device settings and through Clutch5 settings.
9. Global Privacy Control
Clutch5 does not sell personal information or share personal information for cross-context behavioral advertising. Because Clutch5 does not currently engage in practices to which a Global Privacy Control opt-out would apply, a GPC signal does not change how the Service currently operates. If that changes, we will update our practices and disclosures as required by applicable law.
10. Changes to This Policy
We may update this Policy as the Service and technologies change. The version and last-updated date at the top show the current version. Material changes will be communicated through the Service, website, or email.
11. Contact
Clutch5 — operated by FlipCard LLC
Email: [email protected]
Website: https://clutch5.app
A postal address for written correspondence will be published here once it is confirmed.