Legal changelog

16 September 2026 (code follow-ups)

Pages: Terms of Service, Privacy Policy, Cookie Policy

Terms, section 10: the platform fee is now returned to the club when it refunds a registration payment (in full on a full refund, pro rata on a partial one); previously the fee was kept. The refund code was changed to match.
Terms, section 14 and Privacy, section 10: self-service account deletion from the dashboard (Account → Delete my account), with the rule that the only admin of a club that still has other members must hand over or delete the club first.
Privacy, section 9: replaced "no automatic retention limits" with the schedule a nightly purge now applies — audit log 24 months, text-message log 12 months, notification inbox 6 months, failed-email records, Stripe event log and scanner results 90 days, finished notification jobs 30 days. Signatures, registrations, payments and consent records are excluded from the purge.
Privacy, section 9: deleting an account now replaces the user's ID in club audit logs with "deleted-user" rather than leaving it in place.
Cookie Policy: rewritten from the code. Removed a "selected organization" cookie that never existed; listed the actual cookies (Clerk session cookies, hos-theme, hos-density, hos-season-<club>, Stripe's fraud-prevention cookies on payment pages) with purpose, duration and category, and added the browser-storage keys (registration family-group token, install-prompt dismissal, offline scoring queue, service-worker caches).

Pages: Terms of Service, Privacy Policy, SMS Terms and Consent

Rewrote all three documents to describe what the product actually does, replacing the placeholder text from May 2026.
Terms: added the club-as-controller / HockeyOS-as-service-provider split, minors and parental consent, registration payments through Stripe Connect and the platform fee, e-signature records, text messaging, AI game-sheet scanning, and an exact description of data export and organization deletion (immediate and permanent, no grace period).
Privacy: listed every field collected, every service provider with location and purpose, what is public by design (including that uploaded files sit at public URLs), and an honest retention section noting that no automatic purge is yet applied to logs and records.
SMS: documented the three message types, their frequency and the monthly cap, that numbers come from club-entered household records, and that per-number consent capture is being added.