Privacy Policy

The short version

• No account, password or email is required for public tools or Team ID features.
• Your selected Team ID stays in your browser unless you use a server-backed league feature.
• We read only public Fantasy Premier League data via the official FPL API.
• We never sell your data.

What we store

When you enter your FPL Team ID for personal tools, it is saved in your browser so the app remembers it on your next visit. You can clear it any time by clearing your browser storage. If you subscribe to push notifications, we store the subscription token needed to deliver them.

Mini-Leagues

If you use the Mini-League Manager, we store on our servers the information needed to run that league:

• the league's public FPL league ID, its name and its type, plus the public FPL entry IDs, team names and manager names of its members - all of which FPL already publishes to anyone who can see the league;
• which managers are participating in the league's award arrangement, the awards and rules the organizer configured, and the results computed from official FPL data;
• where a league records money, the contribution amount, any organizer fee, and the paid or awaiting status the organizer records against each participant. These are the organizer's own records - we never see, hold or process the money itself;
• a log of changes to the above, including who made each change and when, so members can see how their league has been run.

A mini-league page is readable by anyone with its link. It is not listed in search engines, but treat the link as shareable: only send it to the people in your league. If you are an organizer and want a league removed, contact us.

Optional OneFPL accounts

League hosts and administrators can create an optional OneFPL account using Google or an email magic link. Authentication is provided by Supabase. When you sign in with Google, Google shares basic profile information such as your name and email address with Supabase and OneFPL. We store your account identifier, email address and display name so you can access account-only features. OneFPL never receives your Google password or your official FPL password.

Supabase sets essential session cookies when you sign in. These cookies contain the identifiers and tokens required to keep your OneFPL account authenticated and are not used for advertising.

Analytics and ads

We may use privacy-respecting analytics to understand which features are used, and light advertising on content pages (such as the blog) to help cover hosting. Where required, ad and analytics providers set their own cookies - see our Cookie Policy.

Third-party data

OneFPL fetches data from the official Fantasy Premier League API. We are not affiliated with the Premier League or FPL - see our disclaimer.

Contact

Questions about privacy? Get in touch.