update terms/privacy

templates/privacy.html

@@ -7,7 +7,7 @@
     <header class="legal-doc__header">
         <p class="lp-kicker">Legal</p>
         <h1 class="legal-doc__title">Privacy Policy</h1>
-        <p class="legal-doc__meta">Effective June 27, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
+        <p class="legal-doc__meta">Effective June 28, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
     </header>
 
     <div class="legal-doc__body">
@@ -40,6 +40,13 @@
             <li>Which account invited you and when.</li>
         </ul>
 
+        <h3>Support and operational data</h3>
+        <ul>
+            <li>Account status information such as whether an account is verified, disabled, or marked as a site administrator.</li>
+            <li>Aggregate operational metrics derived from existing records, such as user counts, active users, league counts, session counts, ledger event counts, voided event counts, and recorded ledger volume.</li>
+            <li>Support actions performed through internal tools, such as account email updates, password reset or temporary password emails, account disable/restore actions, league archive/restore actions, league deletion, and ownership transfers.</li>
+        </ul>
+
         <h2>3. What we do not collect</h2>
         <ul>
             <li><strong>Real names.</strong> Player display names are arbitrary labels chosen by league managers and are not required to correspond to real legal identities.</li>
@@ -47,7 +54,7 @@
             <li>Location or GPS data.</li>
             <li>Browser fingerprints or device identifiers.</li>
             <li>Advertising IDs or third-party tracking identifiers.</li>
-            <li>Analytics data. There are no third-party analytics scripts (no Google Analytics, Mixpanel, or similar) on myboker.org.</li>
+            <li>Third-party analytics data. There are no third-party analytics scripts (no Google Analytics, Mixpanel, or similar) on myboker.org.</li>
         </ul>
 
         <h2>4. Cookies and transient data</h2>
@@ -61,27 +68,34 @@
             <li>To store and display your league, session, and player data to you and the members of your leagues.</li>
             <li>To send transactional emails: account verification, password reset, and league invitations.</li>
             <li>To enforce rate limits and protect the service from abuse.</li>
+            <li>To provide account and league support, including correcting account emails, helping with password recovery, disabling abusive or compromised accounts, transferring league ownership, and handling deletion requests.</li>
+            <li>To understand basic service health and usage through first-party aggregate metrics calculated from records already stored by the Service.</li>
         </ul>
         <p>We do not sell, rent, share, or otherwise disclose your personal information to third parties for advertising or marketing purposes.</p>
 
-        <h2>6. Third-party services</h2>
+        <h2>6. Internal administration</h2>
+        <p>Authorized site administrators may use private internal tools to view account, league, session, membership, and ledger information when needed to operate the Service, respond to support requests, investigate abuse or security issues, correct account or league problems, and maintain service reliability.</p>
+        <p>Internal tools may display aggregate service metrics, including recorded ledger volume. Recorded ledger volume is a usage metric only. myboker.org does not process payments, hold money, transfer funds, or treat recorded ledger amounts as platform revenue.</p>
+
+        <h2>7. Third-party services</h2>
         <p>We use a third-party SMTP provider to deliver transactional emails. This provider receives only the recipient email address and the message content required to deliver your email. No other personal data is shared with this provider.</p>
         <p>We have no other third-party integrations, analytics platforms, or data processors.</p>
         <p>Servers hosting myboker.org are located in <strong>North America</strong> (primarily Canada; potentially the United States). Data is not intentionally transferred to the European Union, though no geographic restriction is technically enforced at the network level.</p>
 
-        <h2>7. Player display names</h2>
+        <h2>8. Player display names</h2>
         <p>Player profiles in a league use display names set by the league manager. These names do not need to be real legal names; they are arbitrary labels for tracking purposes. All leagues are <strong>private by default</strong>, meaning player data is only visible to members of that specific league.</p>
         <p>If you are a league manager adding players, you are responsible for ensuring that players whose results you track have agreed to participate in your league and have their results recorded.</p>
 
-        <h2>8. Data retention and deletion</h2>
+        <h2>9. Data retention and deletion</h2>
         <p>We retain your data for as long as your account is active. You have two options for removing your data:</p>
         <ul>
             <li><strong>Account deletion:</strong> available in account settings. This is immediate and permanent. Your account, all leagues you own, and all associated session history are irreversibly removed.</li>
             <li><strong>League deletion:</strong> league owners can permanently delete a league, which removes all its sessions, players, and ledger events. Archiving a league preserves data while hiding the league from active views.</li>
         </ul>
+        <p>Site administrators may disable accounts, restore accounts, archive leagues, restore leagues, transfer league ownership, or permanently delete accounts or leagues when needed for support, security, abuse prevention, or to complete a verified user request.</p>
         <p>We do not have automated data expiry periods. Data remains until you delete it. As the user base grows, we may introduce formal retention policies and will update this policy accordingly.</p>
 
-        <h2>9. Your rights</h2>
+        <h2>10. Your rights</h2>
         <p>Under PIPEDA and BC PIPA, you have the right to:</p>
         <ul>
             <li>Know what personal information we hold about you.</li>
@@ -92,16 +106,16 @@
         <p>To exercise any of these rights, contact us at <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>. We will respond within 30 days.</p>
         <p>If you are a resident of the European Union, additional rights may apply under the GDPR. myboker.org is not specifically directed at EU residents, but we will honour GDPR deletion and access requests made in writing.</p>
 
-        <h2>10. Age requirement</h2>
+        <h2>11. Age requirement</h2>
         <p>You must be <strong>at least 18 years old</strong> to create an account on myboker.org. By registering, you confirm you meet this requirement. If we become aware that an account was created by someone under 18, we will permanently delete that account.</p>
 
-        <h2>11. Security</h2>
+        <h2>12. Security</h2>
         <p>We apply standard security measures including encrypted connections (TLS in transit), bcrypt password hashing, CSRF protection, and rate limiting. No method of data transmission or storage is 100% secure. We cannot guarantee absolute security but take reasonable precautions to protect your information.</p>
 
-        <h2>12. Changes to this policy</h2>
+        <h2>13. Changes to this policy</h2>
         <p>We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of myboker.org after changes are posted constitutes your acceptance of the revised policy.</p>
 
-        <h2>13. Contact</h2>
+        <h2>14. Contact</h2>
         <p>Questions or requests regarding this policy:</p>
         <p>
             <strong>Cedarline Digital</strong><br>