Legal
Cookie Policy
Clutch5 Beta — Cookie Policy — Version 1.3
This Cookie Policy explains how Clutch5 uses cookies and similar technologies on the Clutch5 website, web application, and installed web experience. Read it together with our Privacy Policy and Terms of Service.
1. What Cookies and Similar Technologies Are
A cookie is a small piece of data that a website asks your browser to store and send back with later requests. Cookies are used for purposes such as keeping you signed in, remembering settings, protecting against fraud and bots, and measuring use of a service.
Clutch5 also uses technologies that are not technically cookies but serve related functions: a service worker, the service worker’s cache, browser local storage, and push subscriptions. This Policy refers to all of these as “cookies and similar technologies.”
2. Technologies Clutch5 Uses
Clutch5 uses only necessary or functional technologies for the Service when the corresponding features are active. We do not use advertising cookies, cross-site behavioral tracking, or third-party analytics on the Clutch5 domain.
This table was checked against the Clutch5 source code and the live site on September 28, 2026. Provider behavior can change as browsers and service providers update their systems; we keep this table consistent with the live Service.
| Name / type | Set by | Purpose | Category | Typical duration |
|---|---|---|---|---|
clutch5_session |
Clutch5 | Keeps you signed in and protects authenticated requests. Sent as HTTP-only, SameSite=Lax, Path=/, and marked Secure when the Service is served over HTTPS. The cookie holds a session token; the server stores only a cryptographic hash of that token. |
Strictly necessary | Up to 90 days |
| Service worker | Clutch5 | Registered when you open Clutch5, so the app can update itself, show notifications you have turned on, and work when added to your Home Screen. It does not store pages for offline use. | Functional | Until you clear site data |
| Push subscription | Your browser | Created only after you turn notifications on and your browser grants permission. Lets the browser’s push service deliver Clutch5 alerts to this device. | Functional | Until you turn notifications off, revoke permission, or clear site data |
Service-worker cache: clutch5-diagnostics |
Clutch5 | Holds (1) the list of games counted in the number on the app icon, up to 50, cleared when you open the app; and (2) a diagnostic log of the last 40 notification events on this device (times, page paths, game identifiers). No email address, account identifier, push address, or key. | Functional | Until replaced, or until you clear site data |
Local storage: clutch5:notification-diagnostics |
Clutch5 | A diagnostic log of the last 40 app events related to notifications on this device, used to troubleshoot alerts. Contains no email address, account identifier, push address, or key. It stays on your device and is not sent to Clutch5. | Functional | Until replaced, or until you clear site data |
Local storage: clutch5:auto-handoff |
Clutch5 | Remembers an optional, off-by-default setting on this device that tries to open your streaming app automatically after you tap a notification. It can be turned on only with a special link we provide for testing, not from Settings, and is present only if it has been turned on. | Functional | Until turned off, or until you clear site data |
| Cloudflare security cookies, if enabled | Cloudflare | May be used for bot detection, DDoS protection, or security challenges when Clutch5 uses Cloudflare security features that require them. | Strictly necessary | Controlled by Cloudflare and the security feature used |
clutch5_session is the only cookie Clutch5 itself sets.
The short-lived, single-use state that protects the Google sign-in flow against forgery is not a cookie. It is stored server-side and associated with the login request, and it is invalid after use or after a short period.
Apart from the items in the table, Clutch5 does not store interface state or preferences in browser local storage, session storage, or IndexedDB. Your sports, team, and notification preferences are stored with your account on our servers, not in your browser.
Blocking strictly necessary cookies can prevent sign-in or other account features from working. Clearing site data may remove installed-web-app state, the settings and logs above, or notification permissions.
Stripe-hosted pages
If you subscribe or manage billing, Clutch5 uses Stripe-hosted Checkout and the Stripe-hosted Customer Portal. When you leave Clutch5 for a Stripe-hosted payment or billing page, Stripe may set cookies such as __stripe_mid, __stripe_sid, or other security and fraud-prevention cookies on Stripe-controlled domains under Stripe’s own policies.
Those Stripe-hosted-page cookies are not Clutch5-domain cookies. If Clutch5 later embeds Stripe payment components directly on clutch5.app, we will update this Policy before deploying that change.
3. Google Sign-In
If you choose “Continue with Google,” your browser is redirected to Google. Google may use cookies on Google-controlled domains under Google’s own policies. Those are not Clutch5 cookies and Clutch5 does not control them. After authentication, Google returns your browser to an authorized Clutch5 callback URL.
4. Email Sign-In
If you sign in with your email address instead of Google, Clutch5 emails you a short-lived, single-use six-digit code. That flow sets no cookie of its own beyond the session cookie described in Section 2 once you are signed in. The message is delivered by a third-party transactional email provider; Clutch5 writes it with no links or tracking pixels. See the Privacy Policy for details.
5. Stripe and Payments
If you choose to subscribe, Clutch5 may redirect you to Stripe-hosted Checkout. If you manage billing, Clutch5 may redirect you to Stripe’s hosted Customer Portal.
Stripe processes payment information and may use cookies or similar technologies on Stripe-controlled pages for payment processing, fraud prevention, account security, and related purposes. Stripe’s use of those technologies is governed by Stripe’s own terms and privacy policy.
Clutch5 does not place Stripe advertising or behavioral-tracking cookies on the Clutch5 domain.
6. Third-Party Links
Clutch5 links to broadcasters, streaming platforms, leagues, teams, and other third parties. Once you follow a link, that service may set its own cookies and collect data under its own policies. Clutch5 does not control third-party sites.
7. Analytics, Advertising, and Consent
Clutch5 does not use:
- third-party analytics (such as Google Analytics);
- advertising cookies or pixels (such as Meta Pixel);
- session replay or heatmap tools;
- cross-site behavioral advertising trackers; or
- data-broker technologies.
If Clutch5 adds any non-essential analytics, advertising, or tracking technology, we will update this Policy and the table above before the technology is deployed and will provide a consent or opt-out mechanism where required by applicable law.
8. Your Choices
You can control cookies and storage through your browser settings, including blocking or deleting cookies, clearing site data, and revoking site permissions. Blocking necessary cookies or clearing site data may sign you out or prevent features from functioning.
You can manage push notifications through your browser or device settings and through Clutch5 settings.
9. Global Privacy Control
Clutch5 does not sell personal information or share personal information for cross-context behavioral advertising. Because Clutch5 does not currently engage in practices to which a Global Privacy Control opt-out would apply, a GPC signal does not change how the Service currently operates. If that changes, we will update our practices and disclosures as required by applicable law.
10. Changes to This Policy
We may update this Policy as the Service and technologies change. The version and last-updated date at the top show the current version. Material changes will be communicated through the Service, website, or email.
11. Contact
Clutch5 — operated by FlipCard LLC
Email: [email protected]
Website: https://clutch5.app
A postal address for written correspondence will be published here once it is confirmed.