Privacy Policy

1. Information We Collect

FPL Core collects only what it needs to provide the service. Much of it works without an account.

• Account details: your email address when you sign in with an email code. If you sign in with Apple or Google, we receive the account identifier and email address they share (Apple may give a private relay address instead of your real one).
• Your FPL Team ID, and the public Fantasy Premier League data for the teams and leagues you look up (squads, transfers, standings), which the Premier League publishes.
• What you save: transfer plans and custom leagues saved to your account.
• Membership: your plan, its status and renewal date. Payments are handled by Stripe (on the website), Apple (App Store) or Google (Google Play); we never see your card details.
• Usage and diagnostics: which features are used, your device type and app version, and crash and error reports.
• Messages you send us.
• Preferences on your device: theme, Team ID, table settings, starred leagues and planner drafts are stored in your browser or on your phone, not on our servers.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain FPL Core, and keep you signed in
• Show your team, leagues and saved plans
• Provide member features and check your membership
• Send sign-in codes and reply to your messages
• Analyze usage patterns to improve FPL Core
• Find and fix crashes and other technical issues

We don't sell your personal information. The app doesn't track you across other companies' apps or websites.

3. Third-Party Services

FPL Core uses data from the Official Fantasy Premier League API. Your use of FPL data is also subject to the Premier League's privacy policy and terms of service.

We rely on these providers, each of which handles your data only to provide its service to us:

• Supabase: our database and sign-in
• Netlify: hosts the website
• Stripe: memberships bought on the website
• RevenueCat: records memberships bought in the app, using your account ID and the purchase details Apple or Google share
• Apple and Google: sign-in and in-app purchases
• PostHog: product analytics and error reports
• Sentry: crash reports from the app
• Google AdSense and Google Analytics: on the website only
• YouTube: match highlights, which apply YouTube's own privacy policy when you play one

Some of these providers are based outside the UK and EEA, so your data may be processed in other countries. Links to partners such as FPL Copilot may include your FPL Team ID so their site can open your team.

4. Cookies, Advertising and Analytics

FPL Core shows advertising from Google AdSense to website visitors who are not Core Members. In the UK, the EEA and Switzerland, Google's consent message asks before any advertising cookies are set, and you can change your choice at any time through the “Privacy settings” link in the footer. Members see no ads, and the app shows none.

We use Google Analytics to understand how the website is used; in the regions above it runs without cookies until you consent. We also use PostHog, a first-party product analytics tool, to see which features are used and to catch errors, and the app sends crash reports to Sentry. You can turn these off for your account under Profile → “Share usage analytics” on the website, or Account → “Share usage analytics” in the app.

The remaining cookies and local storage keep you signed in and remember your preferences (theme, Team ID, table settings). You can also control cookies through your browser preferences.

5. Data Security

We implement reasonable security measures to protect your information. However, no method of transmission over the internet is 100% secure.

6. Deleting Your Account

You can delete your account at any time: on the website under Profile → “Delete account”, or in the app under Account → “Delete account”. This removes your account, profile, saved plans, custom leagues and membership records from our database. If you use Sign in with Apple, deleting from the iOS app also revokes FPL Core's access to your Apple ID.

Stripe, Apple and Google keep their own records of past payments, as the law requires. Public FPL data about your team stays available, as it does on the official FPL site.

7. Your Rights

You have the right to:

• Access the information we hold about you
• Request deletion of your data
• Opt-out of data collection where applicable
• Update or correct your information

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by posting the new policy on this page.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected]