diff --git a/config.py b/config.py
index d54a306..8a81ae4 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.28"
+APP_VERSION = "2.5.29"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/templates/privacy.html b/templates/privacy.html
index 8bc883b..0d50e43 100644
--- a/templates/privacy.html
+++ b/templates/privacy.html
@@ -7,7 +7,7 @@
     <header class="legal-doc__header">
         <p class="lp-kicker">Legal</p>
         <h1 class="legal-doc__title">Privacy Policy</h1>
-        <p class="legal-doc__meta">Effective June 27, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
+        <p class="legal-doc__meta">Effective June 28, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
     </header>
 
     <div class="legal-doc__body">
@@ -40,6 +40,13 @@
             <li>Which account invited you and when.</li>
         </ul>
 
+        <h3>Support and operational data</h3>
+        <ul>
+            <li>Account status information such as whether an account is verified, disabled, or marked as a site administrator.</li>
+            <li>Aggregate operational metrics derived from existing records, such as user counts, active users, league counts, session counts, ledger event counts, voided event counts, and recorded ledger volume.</li>
+            <li>Support actions performed through internal tools, such as account email updates, password reset or temporary password emails, account disable/restore actions, league archive/restore actions, league deletion, and ownership transfers.</li>
+        </ul>
+
         <h2>3. What we do not collect</h2>
         <ul>
             <li><strong>Real names.</strong> Player display names are arbitrary labels chosen by league managers and are not required to correspond to real legal identities.</li>
@@ -47,7 +54,7 @@
             <li>Location or GPS data.</li>
             <li>Browser fingerprints or device identifiers.</li>
             <li>Advertising IDs or third-party tracking identifiers.</li>
-            <li>Analytics data. There are no third-party analytics scripts (no Google Analytics, Mixpanel, or similar) on myboker.org.</li>
+            <li>Third-party analytics data. There are no third-party analytics scripts (no Google Analytics, Mixpanel, or similar) on myboker.org.</li>
         </ul>
 
         <h2>4. Cookies and transient data</h2>
@@ -61,27 +68,34 @@
             <li>To store and display your league, session, and player data to you and the members of your leagues.</li>
             <li>To send transactional emails: account verification, password reset, and league invitations.</li>
             <li>To enforce rate limits and protect the service from abuse.</li>
+            <li>To provide account and league support, including correcting account emails, helping with password recovery, disabling abusive or compromised accounts, transferring league ownership, and handling deletion requests.</li>
+            <li>To understand basic service health and usage through first-party aggregate metrics calculated from records already stored by the Service.</li>
         </ul>
         <p>We do not sell, rent, share, or otherwise disclose your personal information to third parties for advertising or marketing purposes.</p>
 
-        <h2>6. Third-party services</h2>
+        <h2>6. Internal administration</h2>
+        <p>Authorized site administrators may use private internal tools to view account, league, session, membership, and ledger information when needed to operate the Service, respond to support requests, investigate abuse or security issues, correct account or league problems, and maintain service reliability.</p>
+        <p>Internal tools may display aggregate service metrics, including recorded ledger volume. Recorded ledger volume is a usage metric only. myboker.org does not process payments, hold money, transfer funds, or treat recorded ledger amounts as platform revenue.</p>
+
+        <h2>7. Third-party services</h2>
         <p>We use a third-party SMTP provider to deliver transactional emails. This provider receives only the recipient email address and the message content required to deliver your email. No other personal data is shared with this provider.</p>
         <p>We have no other third-party integrations, analytics platforms, or data processors.</p>
         <p>Servers hosting myboker.org are located in <strong>North America</strong> (primarily Canada; potentially the United States). Data is not intentionally transferred to the European Union, though no geographic restriction is technically enforced at the network level.</p>
 
-        <h2>7. Player display names</h2>
+        <h2>8. Player display names</h2>
         <p>Player profiles in a league use display names set by the league manager. These names do not need to be real legal names; they are arbitrary labels for tracking purposes. All leagues are <strong>private by default</strong>, meaning player data is only visible to members of that specific league.</p>
         <p>If you are a league manager adding players, you are responsible for ensuring that players whose results you track have agreed to participate in your league and have their results recorded.</p>
 
-        <h2>8. Data retention and deletion</h2>
+        <h2>9. Data retention and deletion</h2>
         <p>We retain your data for as long as your account is active. You have two options for removing your data:</p>
         <ul>
             <li><strong>Account deletion:</strong> available in account settings. This is immediate and permanent. Your account, all leagues you own, and all associated session history are irreversibly removed.</li>
             <li><strong>League deletion:</strong> league owners can permanently delete a league, which removes all its sessions, players, and ledger events. Archiving a league preserves data while hiding the league from active views.</li>
         </ul>
+        <p>Site administrators may disable accounts, restore accounts, archive leagues, restore leagues, transfer league ownership, or permanently delete accounts or leagues when needed for support, security, abuse prevention, or to complete a verified user request.</p>
         <p>We do not have automated data expiry periods. Data remains until you delete it. As the user base grows, we may introduce formal retention policies and will update this policy accordingly.</p>
 
-        <h2>9. Your rights</h2>
+        <h2>10. Your rights</h2>
         <p>Under PIPEDA and BC PIPA, you have the right to:</p>
         <ul>
             <li>Know what personal information we hold about you.</li>
@@ -92,16 +106,16 @@
         <p>To exercise any of these rights, contact us at <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>. We will respond within 30 days.</p>
         <p>If you are a resident of the European Union, additional rights may apply under the GDPR. myboker.org is not specifically directed at EU residents, but we will honour GDPR deletion and access requests made in writing.</p>
 
-        <h2>10. Age requirement</h2>
+        <h2>11. Age requirement</h2>
         <p>You must be <strong>at least 18 years old</strong> to create an account on myboker.org. By registering, you confirm you meet this requirement. If we become aware that an account was created by someone under 18, we will permanently delete that account.</p>
 
-        <h2>11. Security</h2>
+        <h2>12. Security</h2>
         <p>We apply standard security measures including encrypted connections (TLS in transit), bcrypt password hashing, CSRF protection, and rate limiting. No method of data transmission or storage is 100% secure. We cannot guarantee absolute security but take reasonable precautions to protect your information.</p>
 
-        <h2>12. Changes to this policy</h2>
+        <h2>13. Changes to this policy</h2>
         <p>We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of myboker.org after changes are posted constitutes your acceptance of the revised policy.</p>
 
-        <h2>13. Contact</h2>
+        <h2>14. Contact</h2>
         <p>Questions or requests regarding this policy:</p>
         <p>
             <strong>Cedarline Digital</strong><br>
diff --git a/templates/support.html b/templates/support.html
index 3e3942a..c7b29c1 100644
--- a/templates/support.html
+++ b/templates/support.html
@@ -323,7 +323,7 @@
             <details class="faq-item">
                 <summary class="faq-item__q">Does myboker.org track me or use analytics?</summary>
                 <div class="faq-item__a">
-                    <p>No. There are no third-party analytics scripts on myboker.org. We set one functional session cookie to keep you signed in and nothing else. We do not sell or share your data. See the full <a href="{{ url_for('public.privacy') }}">Privacy Policy</a> for details.</p>
+                    <p>There are no third-party analytics scripts on myboker.org. We set one functional session cookie to keep you signed in. We may calculate first-party aggregate service metrics from existing account, league, session, and ledger records to understand service health and usage. We do not sell or share your data for advertising. See the full <a href="{{ url_for('public.privacy') }}">Privacy Policy</a> for details.</p>
                 </div>
             </details>
 
diff --git a/templates/terms.html b/templates/terms.html
index 762ce31..0788162 100644
--- a/templates/terms.html
+++ b/templates/terms.html
@@ -7,7 +7,7 @@
     <header class="legal-doc__header">
         <p class="lp-kicker">Legal</p>
         <h1 class="legal-doc__title">Terms of Service</h1>
-        <p class="legal-doc__meta">Effective June 27, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
+        <p class="legal-doc__meta">Effective June 28, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
     </header>
 
     <div class="legal-doc__body">
@@ -65,32 +65,38 @@
 
         <h2>8. Financial data disclaimer</h2>
         <p>Amounts recorded in myboker.org are for <strong>reference and tracking purposes only</strong>. We make no representations about the accuracy, completeness, or legal weight of any financial data entered by users.</p>
+        <p>We may use aggregate recorded ledger totals internally to understand service usage. These totals are not platform revenue, payment volume, money handled by us, or proof that any real-world payment occurred.</p>
         <p>We are not responsible for any disputes, non-payment, or financial losses arising from information tracked in the Service. Home poker games may be subject to local laws. It is your responsibility to ensure your activities comply with the laws of your jurisdiction.</p>
 
-        <h2>9. Account and data deletion</h2>
+        <h2>9. Internal administration and support</h2>
+        <p>Authorized site administrators may use private internal tools to operate and support the Service. These tools may allow administrators to search for users or leagues, view account and league details, update account emails, send password reset or temporary password emails, disable or restore accounts, archive or restore leagues, delete accounts or leagues, and transfer league ownership.</p>
+        <p>We will use these tools only for service operation, support requests, security, abuse prevention, troubleshooting, legal compliance, or other legitimate administrative purposes. You may contact <a href="mailto:support@cedarline.digital">support@cedarline.digital</a> if you believe an administrative action was incorrect.</p>
+
+        <h2>10. Account and data deletion</h2>
         <p>You may permanently delete your account at any time through account settings. <strong>Deletion is immediate and irreversible.</strong> All personal data associated with your account, all leagues you own, and all associated session and player history will be removed. Members of leagues you own will permanently lose access to that league's data.</p>
         <p>League owners may also permanently delete individual leagues without deleting their account. This removes all sessions, players, and ledger events for that league. We strongly recommend reviewing your data before deletion, as this action cannot be undone.</p>
+        <p>Site administrators may also disable, restore, or delete accounts and leagues when needed for support, security, abuse prevention, or to complete a verified user request. In some cases, we may require league ownership to be transferred or league data to be deleted before an account can be permanently removed.</p>
 
-        <h2>10. Service availability</h2>
+        <h2>11. Service availability</h2>
         <p>myboker.org is provided <strong>as-is</strong> and <strong>free of charge</strong>. We do not guarantee continuous availability, uptime, error-free operation, or data preservation. We may perform maintenance, push updates, or experience outages at any time. We will make reasonable efforts to notify users of planned downtime when possible.</p>
 
-        <h2>11. Intellectual property</h2>
+        <h2>12. Intellectual property</h2>
         <p>The myboker.org software, design, and branding are owned by Cedarline Digital. You retain ownership of all data you enter into the Service (league names, player names, session data). You grant us a limited licence to store and display that data for the purpose of providing the Service to you.</p>
 
-        <h2>12. Limitation of liability</h2>
+        <h2>13. Limitation of liability</h2>
         <p>To the fullest extent permitted by applicable law, Cedarline Digital shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of, or inability to use, the Service, including but not limited to loss of data, revenue, or goodwill.</p>
         <p>Our total aggregate liability to you for any claim arising from these Terms shall not exceed the total amount you have paid us in the twelve months preceding the claim. As the Service is currently free of charge, this limit is <strong>$0 CAD</strong>.</p>
 
-        <h2>13. Suspension and termination</h2>
+        <h2>14. Suspension and termination</h2>
         <p>We reserve the right to suspend or permanently terminate any account, at our discretion, for violations of these Terms, abusive behaviour, or any activity that we reasonably believe poses a risk to the Service or other users. We will make reasonable efforts to notify affected users unless doing so would compromise security or is prohibited by law.</p>
 
-        <h2>14. Changes to these Terms</h2>
+        <h2>15. Changes to these Terms</h2>
         <p>We may update these Terms at any time. When we do, we will update the effective date at the top of this page. Continued use of myboker.org after changes are posted constitutes your acceptance of the revised Terms. If changes are material, we will make reasonable efforts to inform users.</p>
 
-        <h2>15. Governing law</h2>
+        <h2>16. Governing law</h2>
         <p>These Terms are governed by and construed in accordance with the laws of the Province of British Columbia and the federal laws of Canada applicable therein, without regard to conflict of law principles. You agree that any dispute arising under these Terms shall be subject to the exclusive jurisdiction of the courts of British Columbia.</p>
 
-        <h2>16. Contact</h2>
+        <h2>17. Contact</h2>
         <p>Questions about these Terms:</p>
         <p>
             <strong>Cedarline Digital</strong><br>