How ClutchSnap Protects Your Family's Data
Effective: September 7, 2026. Last updated: September 20, 2026
ClutchSnap maintains a written Information Security Program covering the administrative and technical safeguards that protect your family's personal information, to the standard the Children's Online Privacy Protection Act (COPPA) sets for services that collect from children, which we apply by choice. This page summarizes our security practices.
Encryption
Connections to our website are encrypted in transit. Your data is encrypted at rest in our database and photo and video storage.
We try to encrypt delivery to your email provider. If encryption isn't available, emails may be sent unencrypted. We allow this fallback so account emails can reach you.
Offline data and downloads on your device rely on its protections. Emails in your inbox rely on your email provider's protections.
Access Controls
You see your own children's data, plus what other families have chosen to share with you: a team gallery you belong to, or the page of a child you've been approved to follow. Our staff's access to production data is restricted and recorded.
Photo and Video Safety
Before a photo is stored, GPS location and camera metadata are stripped from the file. What is read first and kept is the day the photo was taken, and, when you pin an upload to a game, the minute of the match it captures. The location is never read and never kept. Every photo is checked for sexual or violent content before anyone outside your account can see it. Every video is checked the same way, picture and sound, before it is shared with anyone. If the check can't finish, the video isn't shared. Anyone signed in can report a photo or video. The post disappears for you right away. A post reported as unsafe for a child is hidden at once. A phone that already has the photo or video can still show it for up to a day. The parent who uploaded it keeps their own copy, the same as they can see it signed in. It stays hidden unless the report turns out to be a mistake.
Account Security
Passwords are always hashed, never stored in plaintext. Sign-in is protected by rate limiting, and sessions expire automatically after inactivity.
Payment Security
Card payments are handled entirely by our PCI-DSS-compliant payment processor on its own secure checkout. ClutchSnap never receives or stores your card number — we keep only transaction references for billing support.
No Ads, No Data Sales
We show no third-party ads, never build advertising profiles, and never sell your family's data. Photos or videos appear in ClutchSnap's own marketing only when they feature a child whose own parent has explicitly opted that child into the promotional showcase, and that opt-in can be withdrawn at any time. We make our money from what families pay us, never from your data.
Data Minimization
We collect only what the product needs. For example, we ask for your child's birth year for age-appropriate consent — never a full birthdate.
Regular Review
Our Information Security Program is reviewed at least annually, after any security incident, and whenever our data handling practices change.
For how long we keep data and how to delete it, see our Data Retention Policy. For questions, contact [email protected].