Privacy policy · Clutch

Clutch Inc. (“Clutch”, “we”) operates this site. This policy covers the personal data we collect from people who visit, register, pledge, post bounties, upload parts, or buy prints.

What we collect

Account data: email address, chosen username, hashed password, optional display name and profile image.
Content you create: part uploads, bounty posts, comments, ratings, reports, messages sent through the platform.
Transaction data: pledge amounts, print-order line items, shipping address, the Stripe payment intent / transfer IDs that reference your payments. Card numbers are handled by Stripe — we never see or store them.
Technical data: IP address, user agent, request logs, and rate-limit counters. Retained for up to 90 days for abuse prevention.
Session + auth cookies: required for sign-in and CSRF protection.
Analytics cookie + local storage: a random identifier that lets us count a visit as one visit across pages. We record a fixed list of product events — pages viewed, a part downloaded, a print quote started, a checkout started, an order placed — so we can see where the ordering process loses people. We do not record clicks, keystrokes, form contents, or session replays, and there are no advertising or cross-site tracking cookies. Honours your browser’s Do Not Track / Global Privacy Control signal.

How we use it

Operate the platform (accounts, pledges, orders, payouts).
Send transactional email tied to your activity (pledge receipts, order updates, bounty settlement, refunds), and notification email you can turn off (new comments on your parts or bounties).
Detect and prevent abuse (fraud, spam, safety violations, money-laundering).
Comply with legal and tax obligations.

We do not sell personal data. We do not use your uploads or messages to train third-party AI models.

Who we share it with

Stripe — payments, payouts, KYC for printer operators. Governed by Stripe’s privacy policy.
AWS S3 (or equivalent object storage) — hosts uploaded part files and thumbnails.
Email delivery provider — transactional mail only.
PostHog — product analytics. Receives the product events listed above plus page URL, referrer, approximate location from IP, and (when signed in) your account ID. Never your name, email, or shipping address.
Sentry — error reporting. Receives crash and error reports, which can include the page you were on and your account ID. Personal fields are scrubbed before sending.
Law enforcement — when compelled by a valid legal process or to prevent imminent harm.

Your choices

Access / export: email privacy@clutch.parts with your account email to request a copy.
Deletion: we will close your account and scrub personal data on request. Financial records required by law (tax, Stripe settlement receipts) are retained per the retention schedule below.
Correction: you can edit most account data directly in /account.
Notification email: switch it off in /account or with the one-click link in the footer of any notification email. Transactional email about your orders, pledges and account security is always sent.
Objection / restriction (EU/UK): email us and we’ll respond within 30 days.

Retention

Account data: until you delete the account.
Transaction records: 7 years (tax + financial audit requirements).
Server logs + rate-limit data: 90 days.
Published community content (uploads, comments) may persist after account deletion under the license you granted when you posted.

Children

Clutch is not directed to children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has created an account, email us and we will remove it.

International transfers

Data is processed in the United States. By using the service you consent to transfer of your data to the US.

Changes

We will post changes on this page and update the “Last updated” date. Material changes will be emailed to registered users.

Contact

Email privacy@clutch.parts or see /contact for other channels.