Privacy Policy
Template notice. This policy is a starting template and should be reviewed by a lawyer before commercial launch. It is written to meet the main requirements of Singapore's PDPA and the UK GDPR.
What we collect
- Account: email address, a hashed password, and your Fantasy Premier League team ID.
- Public FPL data about that team ID: your squad, points, transfers and history, exactly as published on fantasy.premierleague.com.
- Your answers to our style questionnaire and any preferences you set (kept/avoided players, saved squads).
- Your decisions and feedback: whether you followed a recommendation and, if you tell us, why.
- Technical: IP address for security and rate limiting, session cookies, and basic logs.
We do not collect your FPL password, payment card numbers (handled by our payment provider), or precise location.
Why we use it
- To run the Service: producing recommendations for your team and showing you your history.
- To improve the recommendations: we analyse how recommendations performed. If you leave "help improve the model" switched on, anonymised results from your account contribute to that analysis; you can switch it off in Account at any time.
- To keep the Service secure and to communicate with you about your account.
Legal bases (UK GDPR)
Performance of our contract with you; our legitimate interests in security and service improvement; and your consent where we ask for it (pooled learning, marketing email).
Where it's processed
Our servers are hosted in the EU (Hetzner, Germany). Recommendations are generated using Anthropic's API, which processes the game data and your preferences needed for the recommendation; it does not receive your email address. Email is sent through Resend.
How long we keep it
For as long as you have an account. Deleting your account removes your personal data and per-user records within 30 days; anonymised aggregate statistics may be retained.
Your rights
You can access, correct, export or delete your data, object to processing, and withdraw consent, from the Account screen or by emailing privacy@thefpledge.com. UK users may complain to the ICO; Singapore users to the PDPC.
Cookies
We use one essential session cookie to keep you signed in. No advertising or tracking cookies.
Contact
privacy@thefpledge.com