Loading OneFPL page
Last updated: 19 September 2026. OneFPL is built to need as little of your data as possible.
When you enter your FPL Team ID for personal tools, it is saved in your browser so the app remembers it on your next visit. You can clear it any time by clearing your browser storage. If you subscribe to push notifications, we store the subscription token needed to deliver them.
If you use the Prize Tracker, we store on our servers the information needed to run that league:
A mini-league page is readable by anyone with its link. It is not listed in search engines, but treat the link as shareable: only send it to the people in your league. If you are an organizer and want a league removed, contact us.
League hosts and administrators can create an optional OneFPL account using Google or an email magic link. Authentication is provided by Supabase. When you sign in with Google, Google shares basic profile information such as your name and email address with Supabase and OneFPL. We store your account identifier, email address and display name so you can access account-only features. OneFPL never receives your Google password or your official FPL password.
Supabase sets essential session cookies when you sign in. These cookies contain the identifiers and tokens required to keep your OneFPL account authenticated and are not used for advertising.
Three measurement tools run on OneFPL. Google Analytics, delivered through Google Tag Manager, loads only if you accept analytics cookies. Microsoft Clarity is covered by that same choice and loaded only once you have agreed: it records session replays and heatmaps so we can see where a layout or a flow goes wrong. Its recordings are masked, and OneFPL enforces that in its own code rather than relying on a setting - every page asks Clarity to withhold the text it contains, so it captures the structure of the page and what you did on it, not the words on it. Your Team ID, your team name and anything you type are not captured. Cloudflare Web Analytics is cookieless - it stores nothing on your device and creates no identifier for you - and it is added by Cloudflare at the network edge, so it runs on every visit and OneFPL cannot switch it off per visitor. It receives the page address, the referring site and loading times. Because the measurement is sent to Cloudflare’s analytics endpoint, Cloudflare receives your IP address as the recipient of that data - not only incidentally as the network serving this site.
Light advertising may appear on content pages (such as the blog) to help cover hosting. Where required, ad and analytics providers set their own cookies - see our Cookie Policy.
OneFPL fetches data from the official Fantasy Premier League API. We are not affiliated with the Premier League or FPL - see our disclaimer.
Under UK data protection law each use of your data needs a lawful basis. Ours are:
OneFPL runs on Cloudflare, a US company operating a global network, and accounts and league data are stored with Supabase in a database hosted in Tokyo, Japan. If you accept analytics, Google and Microsoft also receive data as recipients in their own right - Microsoft receives your session recordings and your IP address, and shares a browser identifier with Bing, which is part of the same company. Using the site therefore involves transfers outside the UK, made under the safeguards those providers offer for international transfers.
You can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict how we use it, or to receive it in a portable form. You can also object to processing we carry out on the basis of our legitimate interests, which includes Cloudflare Web Analytics.
Being straight about what an objection to the analytics means in practice: OneFPL cannot switch that beacon off for one visitor, because Cloudflare adds it at the network edge before our code runs. A tracker-blocking extension stops it immediately and changes nothing about how OneFPL works. If you object to us directly we will consider turning it off for everyone, which is the only switch we hold.
Most of what OneFPL knows about you never leaves your device, so for the Team ID and your preferences the fastest route is simply to clear this site’s data. For anything held on our side, contact us and we will action it.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk. We would rather you told us first so we can put it right.
Questions about privacy? Get in touch.