Privacy Policy

If you have any questions or concerns about this Policy, please contact us at support@playclout.gg.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Clout mobile application and related services (collectively, the “Services”). Our website at playclout.com is an informational site only. It does not host accounts, logins, or purchases. The practices described here are those of the Clout app.

By using the Services, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Services.

The Services are offered only to users located in the 50 United States and the District of Columbia. We use on-device location checks to confirm eligibility. Our servers and data storage are located in the United States.

Information you provide to us

• Account details: email address, password, display name, and username. You also choose an avatar from our preset options. We do not collect photos of you for your profile.
• Date of birth (month and year): requested when you sign up with an email address, to confirm you are old enough to use the Services (see Section 8).
• Gameplay and engagement data: your picks and confidence selections, challenge and check-in activity, XP and Coin balances and history, Passes, Boosts, leaderboard rankings, and streaks.
• Reward delivery details: first and last name, email address, and (for physical rewards) a shipping address.
• Community content: messages, replies, and reactions you post in Live Chat; threads, comments, and reactions you post on Discussion Boards; reports you submit; and the users you block.
• Referral information: your referral code, and a referral code you enter at sign-up.
• Support requests and feedback you send us.

Purchase information

Partner Passes and Boosts are purchased in the app through Stripe. Stripe may offer Google Pay, Apple Pay, or card entry where available.

Stripe processes your payment details under its own privacy policy. Clout does not receive or store your full card number. We receive and keep records of what you purchased, when, and for how much, plus the related Stripe transaction references. Rewards are redeemed with earned Coins and involve no payment.

Identity verification information

To confirm eligibility for certain rewards and referral rewards, prevent duplicate or fraudulent accounts, and comply with applicable law, Clout uses Stripe Identity. Stripe Identity is a third-party identity verification service. Verification requires a government-issued photo ID and, where applicable, a live selfie for comparison. It takes place in a secure Stripe session.

Stripe processes and stores your ID images and selfie on our behalf. Clout does not receive or keep those images, or any biometric data derived from them. Clout keeps:

• your verification status (for example, verified, pending, or failed) and any failure reason;
• the number of attempts and Stripe’s reference IDs for the verification;
• a one-way cryptographic hash derived from your ID document number and issuing country. We use this only to detect whether the same identity has been used on more than one account. The original document number cannot be recovered from the hash.

Tax verification information

If the total value of rewards you claim in a calendar year reaches the applicable tax-reporting threshold, we may ask you to complete verification through Stripe. Stripe collects your tax identification and related information directly. Clout keeps only your Stripe account reference and verification status.

Camera

With your permission, the app uses your device camera only to:

• photograph your government-issued ID and take a selfie during Stripe Identity verification; and
• where supported, scan a payment card during a Stripe checkout.

The camera is never used for any other purpose or accessed in the background.

Location information

With your permission, and only while you are using the app, we check your device’s precise location when you:

• submit a pick;
• make a purchase;
• redeem a reward;
• use Streak Saver or share; or
• complete a venue check-in.

How location is used:

• Eligibility checks run on your device. The app confirms you are in an eligible area, and your coordinates are not sent to our servers for this check.
• Check-ins are different. When you search for nearby venues, we send approximate coordinates to our servers. When you complete a check-in, we send your precise coordinates and their accuracy. We use them to confirm you are at the venue and to detect fraud. We delete the raw coordinates after 90 days and keep only the check-in result.

We never access your location in the background or track your movements over time. You can decline location access in your device settings, but features that require eligibility confirmation will then be unavailable. Because precise location is sensitive information under some laws, see Section 2.

Information collected automatically

• Device information: device type and identifiers, operating system, app version, and language.
• App usage analytics, collected through PostHog. This includes the screens you view and actions such as sign-ups, picks, purchases, redemptions, and referrals, linked to your Clout user ID. We have configured PostHog not to record your screen (no session replay), not to derive your location from your IP address, and not to receive your email address.
• Crash reports and error diagnostics, collected through Sentry. We have configured Sentry to exclude personal information such as IP addresses, cookies, and request headers, and not to capture screenshots.
• Server logs and security events, used for operating and securing the Services.

Push notifications

With your permission, we send push notifications about things like pick results, challenge progress, reward unlocks, order status, and season changes. Promotional and partner notifications are sent only if you turn them on in the app.

To deliver notifications, we register a push token with Expo and with Apple (APNs) or Google (FCM). You can change your notification preferences in the app, or turn notifications off in your device settings.

Email

We send transactional emails, such as password resets, purchase and redemption receipts, and verification notices, using Amazon Web Services. We do not currently send marketing email. If we start, you will be able to unsubscribe at any time.

Sign-in data

If you choose to sign in with Apple or Google, we receive an account identifier and your email address (and whether it is verified) from that provider, to create and authenticate your account. We do not receive your password for those services. You can link or unlink these sign-in methods in Settings.

What we don’t collect

Clout does not request or access your contacts, photo library, SMS messages, microphone, Bluetooth connections, or calendar. We do not use advertising identifiers (IDFA/AAID), and we do not track you across other companies’ apps or websites.

The app requests only three permissions, each optional at the device level and each described above:

• camera;
• location (while using the app); and
• push notifications.

Information from third parties

• Sign-in providers (Apple, Google), as described above
• Stripe, which tells us the status of payments, identity verification, and tax verification
• Reward fulfillment partners (such as Tremendous), which tell us delivery status

Some of the information above is treated as “sensitive personal information” under certain U.S. state privacy laws, and we handle it accordingly:

• Precise geolocation. Collected only while you use the app, at the moments described in Section 1. It is never used for tracking or profiling. Raw check-in coordinates are deleted after 90 days.
• Government-issued identification and identity-verification data. Submitted only to Stripe Identity. Clout keeps only your verification status, related reference information, and the one-way duplicate-detection hash described in Section 1.
• Account log-in credentials. Your password is stored only in hashed form.

We use sensitive information solely for the eligibility, identity-verification, security, fraud-prevention, and legal-compliance purposes described in this Policy. We do not use it to infer characteristics about you or for advertising.

We use your information to:

• operate, maintain, and improve the Services;
• create and secure your account;
• process purchases and manage Pass and Boost access;
• confirm your eligibility, including your age and your location;
• track XP and Coin progression, contest results, leaderboards, streaks, and check-ins;
• verify your identity and tax status where required, and prevent duplicate accounts;
• deliver digital and physical rewards, including through our fulfillment partner Tremendous;
• run the referral program;
• host Live Chat and Discussion Boards, and moderate community content. This includes automatically blocking phone numbers and email addresses in posts, and reviewing reported content;
• detect and prevent fraud and abuse, such as implausible check-in travel patterns. These signals are flagged for human review, not used to make fully automated decisions about you. The one exception is identity verification: a verification that matches an identity already used on another account is automatically rejected;
• send transactional messages and the notifications you choose;
• comply with legal, tax, and regulatory obligations, and enforce our Terms of Service.

We do not use your personal data to influence or determine contest outcomes. Clout contests are contests of skill, determined predominantly by participant knowledge and judgment.

We share your information only in the situations below:

• With other users. Your display name, username, avatar, leaderboard position, and community posts are visible to other users.
• With service providers that operate the Services for us under contract: cloud hosting and storage (Amazon Web Services, in the United States); analytics (PostHog); crash and error reporting (Sentry); app delivery and push notifications (Expo, Apple, Google).
• With Stripe for payments, identity verification, and tax verification. Stripe processes this information under its own privacy policy.
• With reward fulfillment partners. We share the limited data needed to deliver your reward, for example your name and email address with Tremendous for digital gift cards. For physical rewards, your name and shipping address go to the shipping carrier.
• With sponsors. We may share aggregated or de-identified information about participation in sponsored activities. We do not give sponsors your name, contact details, or location unless you directly agree.
• For legal compliance and safety. When required by law or valid legal process, or to protect the rights, safety, and security of our users, Clout, or others. This includes reporting child sexual exploitation to the appropriate authorities.
• Business transfers. If we merge, sell, or reorganize our business, user data may transfer as part of that transaction.
• With your consent or at your direction.

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising. Any data shared is limited to what is necessary for the stated purpose.

Within the app, we use analytics and diagnostics software (PostHog and Sentry, described in Section 1) to understand performance and engagement and to fix errors. We do not use advertising SDKs, ad networks, or cross-app tracking, and the app does not ask for permission to track you.

Our website (playclout.com) is informational and uses only what is necessary to serve the site. Where required, it will present a cookie choice that defaults to the most privacy-preserving option.

We keep your information for as long as necessary to provide the Services, maintain your account, and meet our legal, tax, accounting, and fraud-prevention obligations. Specific periods:

• Live Chat and Discussion Board content: automatically deleted after 12 months. Content held for an active review or legal matter is kept for as long as needed for that matter.
• Raw check-in coordinates: deleted after 90 days. The check-in result is kept with your activity history.
• Records of purchases, Coin and XP transactions, and reward claims: kept for accounting and tax purposes. This includes records tied to rewards that meet IRS reporting thresholds.
• Identity-verification status and duplicate-detection hash: kept to prevent the same identity from being used on more than one account, and where required by recordkeeping law.

When you delete your account

You can delete your account in the app (Settings → Account Settings → Delete Account). There is a 14-day grace period, and signing back in during that period cancels the deletion.

When deletion takes effect, we:

• remove or de-identify your email address, display name, username, password, avatar, and linked sign-in accounts;
• delete your check-in history and notifications; and
• scrub your reward delivery details.

Some information is kept after deletion where the law requires it or we have a legitimate need. This includes your transaction and ledger history (for accounting), referral records, identity- and tax-verification records, fraud-prevention records, content you posted (until removed on the 12-month cycle above), and routine backups that are overwritten on a normal cycle.

We use encryption in transit and at rest, access controls, audit logging, and secure U.S. cloud hosting to protect your data. Staff access to personal information is limited to those who need it to run the Services, such as support, moderation, and reward fulfillment.

Despite these efforts, no system is completely secure. We encourage you to use a strong, unique password and to keep it confidential.

The Services are intended only for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it promptly and close any associated account. If you believe someone under 18 has provided us information, contact us at support@playclout.gg.

Age check at sign-up. When you sign up with an email address, we ask for your month and year of birth. If the date indicates you are under 18, no account is created. We may also require identity verification to confirm your age, including before you claim a reward.

To prevent repeated attempts with a different date, we keep a limited record of the attempt: a device identifier, the month and year entered, and the number of attempts. We do not collect a name, email address, or other contact information from that attempt.

You may:

• access, correct, or delete your personal information;
• request a copy of the information we hold about you; and
• control promotional notifications.

You can update your profile, notification preferences, linked sign-in methods, and blocked users in the app. You can delete your account in Settings. For any other request, email support@playclout.gg.

Residents of California, Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws have additional rights. These may include the right to know, access, correct, delete, and obtain a copy of your personal information; to limit the use of sensitive personal information; and to appeal our decision on a request. Clout does not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. We will not discriminate against you for exercising your rights.

Our Services do not currently respond to browser Do-Not-Track signals. We do not track users across third-party websites or apps.

California residents may request:

• disclosure of the categories and specific pieces of personal information we have collected;
• the sources of that information;
• the purposes for which we use it;
• the categories of third parties to whom we disclose it;
• deletion or correction of their personal information; and
• limits on the use of their sensitive personal information.

These rights are subject to legal exceptions. The categories we collect are described in Section 1 and include identifiers, commercial information (purchases and reward claims), internet or other electronic network activity, precise geolocation, and sensitive personal information as described in Section 2.

Clout does not sell or “share” (as defined by the CCPA/CPRA) personal information. We use sensitive personal information only for the purposes permitted under the CPRA.

To submit a verified request, email support@playclout.gg. You may use an authorized agent. We will respond in accordance with the CCPA and CPRA.

We may update this Privacy Policy periodically. The current version will always show the most recent “Last Updated” date. If we make material changes, we will notify you by email or in-app notice before they take effect.

Three Curve Esports LTD
185 Dartmouth Street, 7th Floor
Boston, MA 02116
United States

Email: support@playclout.gg

Deleting your account. Delete your account in the app at Settings → Account Settings → Delete Account. Deletion takes effect after a 14-day grace period.

Other requests. To request access, correction, a copy of your data, or deletion without using the app, email support@playclout.gg. We will verify your identity and respond within the timeframes required by applicable privacy laws.