Privacy policy

Last updated November 1, 2026.

What we collect

• Phone numbers, to send one-time sign-in codes. We store a keyed hash of each number plus its last 4 digits for display. When you join someone's gift crew, we also keep your full number with that list so the list owner can text you a thank-you if you mark a gift bought or use the parents' lane; it's shown to them only then, from Reveal Day (see “Who sees what”). If you opt in to text reminders, we use your full number for those too. We don't store list owners' full numbers.
• First names you enter.
• Wishes list owners add (title, link, the price they typed, hype, sticker, note).
• Link previews: when an owner pastes a store link, our server opens that public page once (no cookies, no account) to suggest a name and price. We keep the suggestion briefly in memory to avoid re-fetching, and we never fetch Amazon pages for prices.
• Dibs and purchase status gifters record. List owners never receive this data before Reveal Day.
• Optional email for dibs reminders.
• Help messages you send through the Help form (your message, the email or phone you give us for a reply, optional name and list link). We use them only to answer you, and you can ask us to delete them at any time.
• Basic usage counts, from our own server (no ad or analytics trackers, no third-party cookies): for example that a sign-in code was sent or failed, or that an Amazon link was clicked (not which item). These counts carry no phone numbers or names.

Text messages (SMS)

• Sign-in codes: sent only when you request one, one message per request.
• Dibs reminders: only if you tick the separate opt-in box. Up to 2 texts per dibs (day 3 and day 6). Reply STOP to opt out at any time, HELP for help. Msg & data rates may apply.
• We never sell or share phone numbers or opt-in data with third parties or affiliates for marketing.
• Texts link only to clutch.gift, never to a store.

Who sees what

List owners see their own wishes and the first names of people in their gift crew. Gifters see the list, dibs, bought status, the crew's first names and the gifters-only activity feed. Nobody else sees your phone number, with one exception: Reveal Day thank-yous. From Reveal Day (the day after the event), the list owner sees the number of each gifter who marked a gift bought (and of each parent who used the parents' lane), on the thank-you card only, so they can text a thank-you from their own phone. clutch.gift doesn't send those texts. People who only held or passed on a gift are never shown.

Parent-managed lists: if a parent makes the list for their kid (“My kid” at setup), the parent also sees which gifter (by first name) called dibs on or bought each gift. Gifters are told this on the join page and before they call dibs. On every other list, the owner never sees dibs or buys.

Friend links: your friend link carries a random code, not your name or number. If someone signs up through it, we record which list referred them so we can count it. The person who shared the link sees only a count, plus your first name if you tick “Let them see my first name” at setup (off by default; never for parent-managed lists). They never see your list, wishes or phone number. The link sets a cookie for 30 days so the referral is remembered while you sign up.

Service providers

Hosting (Netlify), database (Supabase), text codes (Twilio Verify), email (Resend, including the email that tells us about a new help message). They process data only to run the service.

Kids

clutch.gift is for ages 13 and up. List owners tick “I'm 13 or older” when they make a list; we store only when they agreed, never a birthdate. Children under 13 should not create lists; a parent can create and hold a list for them.

Affiliate links

Some store links may include an affiliate tag. As an Amazon Associate we earn from qualifying purchases. No order data comes back to us or to the list owner.

Deleting your data

Ask the list owner to remove you from their crew, or contact us through the Help page to delete a list and its data. A gifter's full number stays with that list until the list is deleted (being removed from a crew doesn't erase it); contact us to have it deleted sooner.