Built to keep your community safe
Security isn't a feature we bolt on — it's how ClutchTick is built. Here's a plain-English look at how we protect your account, your conversations and your data.
Encrypted in transit
Everything between you and ClutchTick travels over TLS 1.2+ with HSTS enforced, so your traffic can't be read or tampered with on the way.
Passwords hashed with Argon2
We never store your password. It's hashed with Argon2 — a modern, memory-hard algorithm built to resist cracking even if data were ever exposed.
Two-factor authentication
Turn on 2FA with any authenticator app (TOTP) and we'll issue one-time recovery codes — so your account stays yours even if a password leaks.
Deny-by-default access
Every action is checked against your real permissions — across communities, the websocket layer and the admin panel. If you're not explicitly allowed, the answer is no.
Rate limiting & anti-spam
Throttles and abuse protection guard logins and messaging, blunting brute-force attempts and keeping spam out of your rooms.
Tested against OWASP risks
We actively probe for the issues that matter — XSS, IDOR, privilege escalation, mass-assignment and unsafe uploads — and fix what we find before it ships.
Tamper-proof scripts
Third-party scripts are pinned with Subresource Integrity, so a compromised CDN can't quietly swap in malicious code on your device.
Your data is yours
We don't sell your information or run ad-tracking on your conversations. You can request account deletion right from Settings, any time.
Scoped session cookies
Sessions use short-lived access tokens and a scoped, http-only refresh cookie — so a session can't be hijacked from JavaScript, and you can sign out any device from Settings.
Found a security issue?
We take reports seriously and we're grateful for them. If you believe you've found a vulnerability, please report it through our contact page with the details and steps to reproduce. Give us a reasonable window to fix it before disclosing publicly, and we'll keep you in the loop.
ClutchTick is in active development. We harden continuously and update this page as our security posture evolves.
Bring your community somewhere safe
Create a room in seconds — secure by default, free to start.