Privacy policy

• •If you join the waiting list, we hold your name and your email address so we can tell you when MyFPL opens. Nothing else.
• •If you have an account, we hold your email address, the settings you choose and the Fantasy Premier League details you give us, so the planner has something to plan with.
• •We do not sell your details, share them with advertisers, or pass them to anyone else except the two companies that host the service for us.
• •There are no advertising trackers and no analytics on this site.
• •You can ask us to delete everything we hold about you, at any time, by emailing pro@myfpl.pro.

MyFPL is an independent Fantasy Premier League planning tool, run by a sole trader based in the United Kingdom. MyFPL is the data controller for the personal information described on this page, which means we decide what is collected and why, and we are responsible for looking after it.

You can reach us about anything on this page at pro@myfpl.pro.

We only collect what the service needs in order to work. Each item below says what it is for, and the legal reason we are allowed to hold it under UK data protection law.

• •The waiting list — your name and email address. So we can tell you when MyFPL opens, and greet you properly when we do. Our legal basis is your consent, given when you submit the form. You can withdraw it at any time and we will remove you.
• •Your account — your email address and password. So you can sign in. Passwords are handled by our authentication provider and stored only as a one-way hash; nobody at MyFPL can see or recover your password. Our legal basis is performing the contract between us — providing the service you signed up for.
• •Your settings — display name, time zone, planning horizon and the weightings you choose. So the app shows the right information in the right order at the right time of day. Legal basis: performing the contract.
• •Your Fantasy Premier League details — your FPL team ID, and the squad, budget, transfers, decisions and notes that go with it. This is the substance of what MyFPL does. Some of it is fetched from the official FPL API using the team ID you give us; the rest is what you enter yourself. Legal basis: performing the contract.
• •Which creators and news sources you follow. So your plan reflects the people you actually trust. Legal basis: performing the contract.
• •Technical records kept by our hosting providers— such as your IP address, the time of a request and any error it produced. These are created automatically by the servers, are used for security and fault-finding, and are deleted on the providers’ own short retention cycles. Legal basis: our legitimate interest in keeping the service secure and working.

• •We do not sell, rent or trade your personal information. Ever.
• •We do not run advertising, and there are no advertising or analytics trackers on this site. This is a statement about the code, not an intention: MyFPL loads no third-party scripts at all.
• •We do not use your information to make automated decisions that have a legal or similarly significant effect on you. MyFPL makes recommendations about a game; every decision stays yours.
• •We do not ask for, and will never ask for, your Fantasy Premier League password. MyFPL only ever uses your public team ID.

MyFPL analyses material that has already been published in public — Fantasy Premier League data from the official API, videos posted by Fantasy Premier League content creators, and posts by football journalists on X. Where that material includes a journalist’s or creator’s name, handle or published words, we process it on the basis of our legitimate interest in summarising published football reporting, and we keep the source and date alongside it so the reader can see where a claim came from.

If you are a creator or journalist and would rather we did not monitor your public account, email pro@myfpl.pro and we will remove you from the register.

We use two companies to run MyFPL. They process your information on our instructions only, under contracts that require them to keep it secure, and neither is permitted to use it for their own purposes.

• •Supabase — the database and the sign-in system. This is where your account, settings and squad are stored.
• •Vercel — hosting. This is what serves the pages to your browser.

Both are able to process data outside the United Kingdom. Where they do, the transfer is covered by the UK International Data Transfer Addendum to the European Commission’s standard contractual clauses, which forms part of both providers’ standard terms.

We will also disclose information if the law requires it — for example in response to a valid court order.

• •Waiting list: until MyFPL opens and we have invited you, or until you ask to be removed — whichever comes first. If MyFPL has not opened within 24 months we will delete the list.
• •Account information: for as long as your account is open. If you close it, or ask us to delete it, we remove it within 30 days.
• •Backups:deleted information can survive in our providers’ encrypted backups for a short period afterwards before those backups roll over. It is not used for anything in the meantime.

Under UK data protection law you have the right to ask us for a copy of the information we hold about you; to have anything wrong corrected; to have it deleted; to restrict or object to what we do with it; and to receive it in a portable form. Where we rely on your consent — as we do for the waiting list — you can withdraw it at any time, and withdrawing it does not affect anything done beforehand.

To exercise any of these, email pro@myfpl.pro. We will respond within one month. We do not charge for this.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you came to us first so we can put it right.

Your data sits behind row-level security in the database, which means the rules about who may read which row are enforced by the database itself rather than only by the application. Traffic is encrypted in transit. Administrative access is limited to the owner of MyFPL. No system is perfect, and we will tell you and the Information Commissioner’s Office promptly if a breach ever puts your information at risk.

MyFPL sets three cookies and none of them are for advertising or analytics. There is a separate page listing them.

MyFPL is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us their details, email pro@myfpl.pro and we will delete them.

If we change this policy we will update the date at the top of the page. If a change materially affects how we use information you have already given us, we will email you about it rather than relying on you to notice.

Any questions about this policy, or about anything we hold, go to pro@myfpl.pro. A real person reads it.