Data Retention Policy

This policy states how long CG Goaltending^™ LLC (“CGG”) keeps each kind of information we collect, and what happens to it after that. It applies to everyone in the program, and it is written primarily for the data we hold about goaltenders — including children under 13, for whom the COPPA Parental Consent Notice is the controlling document.

The principle: we keep information only as long as we need it for the reason we collected it, and then we delete it. We do not keep personal information indefinitely. All windows below run from the end of the last active enrollment unless stated otherwise.

1. The Training Record — 24 Months

Daily check-ins, mindset activity answers, routine and workout logs, training video and film reviews, session bookings and coach feedback, challenge and streak history, and the Development Score history are kept while the goaltender is enrolled, and for 24 months after the last active enrollment ends — long enough for a returning athlete to keep their history through an off-season and a season. Then it is deleted.

2. The Journal — 12 Months

Journal entries and quick notes — the goaltender’s private free-text writing — are kept while enrolled, then 12 months. This is deliberately the shortest window in this policy: it is the most personal and least operationally necessary information we hold, and we do not keep it “just in case.”

3. Identity and Enrollment — 24 Months

• Name, date of birth, guardian links, enrollment history: 24 months after the last active enrollment ends. Identity is kept as long as the longest-lived data it keys, and no longer.
• A profile photo: deleted with the profile. A replaced photo is deleted immediately on replacement.
• An app invitation that is never accepted: deleted 30 days after it is issued.
• An enrollment prepared before an invitation is sent (including a child’s name and date of birth): deleted 60 days after creation if no invitation is ever issued.
• Notification and email delivery records: 90 days. Notification preferences, reminder time, and time zone are deleted with the profile.

4. Proof and Obligations — 7 Years

• Consent records — the COPPA consent, the film-submission consent, and the app agreements, each with the exact text that was accepted and its version: 7 years after the consent ends. We keep proof of permission longer than the data the permission covered, so the answer to “did I agree to this?” always exists. Withdrawal is recorded, never erased.
• Financial and tax records: kept per tax and accounting law (commonly 7 years). These are records of a transaction with the parent, held by Stripe and CGG accounting — not training data about the child.
• A record of a report made to an outside authority: kept per that authority’s requirements. A deletion request cannot retract a report already made, and we will say so when it applies.

5. Technical Data Held by Providers

• Error and diagnostic logs (Sentry): 90 days, configured not to include IP addresses, cookies, or form contents.
• Web analytics (Vercel Analytics): cookieless, with no persistent per-visitor identifier. Goaltenders under 13 are excluded by construction — the analytics script is never sent to them.
• Application request logs (Vercel): held per the hosting platform’s standard retention.

6. How Deletion Works

• On request. A parent (or an adult participant) can request deletion at any time — see the COPPA notice, Section 6. We respond within 30 days, delete everything except the narrow records listed in Sections 4 above, and confirm in writing what we kept and why.
• On schedule. When a retention window above expires, the data is deleted without a request. Deletion removes the data from the live application and its storage; residual copies in encrypted backups age out on the backup cycle.
• On cancellation. Cancelling an enrollment does not delete anything by itself — the windows above start running from the end of the enrollment, so a returning family keeps their history. Ask us if you want deletion sooner; that is your right.

7. Contact