Privacy Policy

This policy explains what personal data FPL Forecast collects, why, who it's shared with, and the choices you have. We've kept it as plain as we can. If anything is unclear, email us at forecastfpl@gmail.com.

Who we are

FPL Forecast (fplforecast.com) is run by FPL Forecast, who is the “controller” of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). You can contact us about anything in this policy at forecastfpl@gmail.com.

FPL Forecast is an independent service. We're not affiliated with the Premier League or the official Fantasy Premier League game.

What we collect

Account detailsYour name and email address. If you sign in with Google, we also receive the name, email address and profile picture on your Google account.

FPL team IDThe team ID you give us, so we can show your squad and personalise your analysis.

Your FPL dataUsing your team ID, we read publicly available information from the official FPL website — your team name, squad, transfers, chips, points and rank, and the standings of mini-leagues you're in (including other managers' names and team names as shown publicly on FPL).

Email preferencesWhether you're happy to receive our gameweek emails, and when you signed up.

FeedbackAnything you send through the feedback form, along with your name and email so we can reply.

Usage dataHow the site is used — pages visited, the site that referred you, browser and device type, and approximate location (country) — collected by our analytics provider.

Sign-in recordsTechnical records needed to keep you signed in securely, such as session and sign-in tokens.

We don't collect payment details, and we never ask for your FPL password.

How we use it, and why

UK law requires us to have a lawful basis for each use of your data:

To run your account and the service — creating your account, signing you in, showing your squad and generating your analysis. Basis: performing our contract with you.
To send you gameweek emails — tips and news about FPL Forecast. Basis: the “soft opt-in” for people who create an account, under the Privacy and Electronic Communications Regulations, and our legitimate interest in telling users about our service. You can opt out when you sign up and in every email.
To reply to feedback and support requests. Basis: legitimate interests.
To understand and improve the site through analytics, and to keep it secure. Basis: legitimate interests.
To meet legal obligations, where they apply.

We don't sell your data, and we don't use it for advertising.

AI analysis

Our recommendations, captaincy picks, fixture insights, player comparisons and league round-ups are generated by an AI model provided by Anthropic. To create them, we send Anthropic FPL data — your squad, player statistics and fixtures, your FPL team name and, for league round-ups, the names of managers in your leagues as shown publicly on FPL.

We don't send your email address. Under Anthropic's commercial terms, data sent through its API isn't used to train its models. The analysis is for entertainment and information only and isn't a guarantee of results.

Emails and unsubscribing

When you create an account, you're signed up to our gameweek emails unless you tick “No thanks” on the sign-up form. Every email includes a one-click unsubscribe link, or you can email us at forecastfpl@gmail.com and we'll remove you. Unsubscribing doesn't affect your account.

We'll still send essential account emails, such as the sign-in links you request.

Who we share it with

We use trusted service providers to run FPL Forecast. They only process your data on our instructions and for the purposes below:

NetlifyHosts the website.

MongoDB AtlasStores account data in our database.

ResendSends sign-in emails and our gameweek emails, and manages our mailing list.

GoogleHandles sign-in if you choose “Continue with Google”.

AnthropicGenerates AI analysis, as described above.

DataFastProvides website analytics.

Fantasy Premier LeagueWe request public FPL data using your team ID. We don't share your name or email with FPL.

We may also disclose data if required by law, or to protect the rights and safety of our users or others. If FPL Forecast is ever sold or merged, your data may transfer to the new owner under this policy.

International transfers

Some of our providers are based in, or process data in, the United States and other countries outside the UK. Where that happens, transfers are protected by safeguards recognised under UK law, such as the UK–US data bridge or the UK International Data Transfer Addendum to standard contractual clauses.

Cookies and browser storage

Sign-in cookiesauthjs.session-token, authjs.csrf-token and authjs.callback-url keep you securely signed in and send you back to the right page. They're strictly necessary, so they don't need consent. The session cookie lasts up to 30 days.

AnalyticsDataFast may use a cookie or a short-lived anonymous identifier to count unique visitors. It doesn't track you across other websites.

Saved resultsYour AI results are kept in your browser's session storage so you don't have to regenerate them as you move around the site. This stays on your device and clears when you close the tab or log out.

How long we keep it

Account details and your team ID: for as long as you have an account.
Unfinished sign-ups: deleted automatically after 48 hours.
Mailing list: until you unsubscribe or close your account.
Feedback emails: for as long as needed to deal with them.

To close your account and delete your data, email forecastfpl@gmail.com from the address you signed up with. We'll confirm once it's done, normally within 30 days.

Your rights

Under UK data protection law, you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data deleted;
restrict or object to how we use it, including objecting to marketing at any time;
receive your data in a portable format.

To use any of these rights, email forecastfpl@gmail.com. We'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk — though we'd appreciate the chance to put it right first.

Security

Data is encrypted in transit, sign-in uses Google or one-time email links rather than passwords, and access to our systems is restricted. No service can promise perfect security, but we take reasonable steps to protect your data.

Children

FPL Forecast isn't intended for children under 13, and we don't knowingly collect their data.

Changes to this policy

If we make significant changes, we'll update the date at the top and let account holders know by email.