Basically the title - do you just have it as a checkbox that restricts sign up unless checked or do you actually store the fact that they have agreed?
For Kampsite I'm currently storing these on every signup as a JSON blob but becoming a bit of a pain to maintain and keep up to date when it changes, so just wondering if this is really needed and I'm just being paranoid, or if there's an easier solution or existing service out there that will handle this for me.
Requiring the box to be checked but then not storing the data seems okay, especially since your ToS/PP are very normal.
If you're going to store something, I'd stick an
agreed_to_tos_attimestamp field on the user, and then you could correlate that against which version of the site was deployed at that time to know which ToS they saw.