FPL LAB

Privacy Policy

Last updated: February 2026

Introduction

FPL Lab ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Fantasy Premier League companion website.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us, including:

  • Email address - When you sign up via Google OAuth for authentication
  • Google account information - Name and profile picture from your Google account
  • FPL Manager ID - When you save your team ID to access premium features
  • Browser information and device data

Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

  • IP address and location data
  • Browser type and version
  • Pages visited and time spent on our site
  • Referring website information

How We Use Your Information

We use the collected information for the following purposes:

  • Authentication - To verify your identity via Google OAuth and maintain your login session
  • Personalization - To save your FPL Manager ID and provide personalized dashboard, team planner, and league tracking
  • Service Delivery - To provide premium features like live points tracking, projections engine, and AI-powered transfer suggestions
  • FPL Data Analysis - To fetch and display your team data, stats, and insights from the official FPL API
  • Communication - To send you weekly FPL insights, blog updates, and account notifications (if you opt in)
  • Service Improvement - To improve our website features and user experience
  • Security - To ensure the security and integrity of our service

Data Sharing and Third Parties

We do not sell your personal information. Period.

We share your information only in the following limited circumstances:

  • Google OAuth - When you sign in with Google, we use Google's authentication service. Google's use of your information is governed by their Privacy Policy.
  • Supabase - Our authentication and database provider. They process account data on our behalf with strict security standards. Data is encrypted at rest and in transit.
  • Fantasy Premier League API - We fetch your public FPL data from the official API when you provide your Manager ID. This data is already publicly available on the FPL website.
  • Legal Requirements - When required by law or to protect our rights and safety

We do NOT share your data with advertisers, data brokers, or marketing companies.

FPL API Usage

Our service utilizes the official Fantasy Premier League API to retrieve publicly available data. We comply with all FPL API terms and conditions. The data we access includes:

  • Player statistics and performance data
  • Team information and fixtures
  • Manager team data (when you provide your Manager ID)
  • League standings and results

Cookies and Local Storage

We use cookies and browser storage technologies to provide and improve our services. We are transparent about our use of these technologies and give you control over non-essential cookies.

Essential Cookies and Storage

These are necessary for the website to function properly and cannot be disabled:

  • Authentication Cookies - Set by Google OAuth and Supabase when you sign in. These cookies keep you logged in and secure your session. They expire when you log out or after a period of inactivity.
  • Cookie Consent - Stores your cookie consent choice for 365 days (cookie name: fpl-lab-cookie-consent)
  • Local Storage - We store your FPL Manager ID locally in your browser so you can access your team across devices. This data never leaves your device unless you're logged in.
  • Session Storage - Used to remember if you've dismissed signup prompts during your current browsing session. This is cleared when you close your browser.

What We DON'T Use

FPL Lab does not use:

  • ❌ Advertising cookies or pixels
  • ❌ Social media tracking cookies
  • ❌ Cross-site tracking
  • ❌ Marketing or retargeting cookies

Managing Cookies

You can manage your cookie preferences at any time:

  • Cookie Consent Banner - Accept or decline cookies via the banner that appears on your first visit
  • Browser Settings - You can block cookies through your browser settings, though this may affect site functionality
  • Clear Storage - Clear your browser's local storage and cookies to remove all saved data

Cookie Retention Periods

  • Authentication cookies: Session-based or until logout
  • Cookie consent preference: 365 days
  • Local storage (FPL ID): Until manually cleared or account deleted
  • Session storage: Until browser tab/window is closed

Your Rights

You have full control over your personal information:

  • Access Your Data - View your email, FPL team ID, and account settings in your account dashboard
  • Update Information - Change your FPL team ID or notification preferences anytime in account settings
  • Delete Your Data - Sign out and clear your browser storage, or contact us to permanently delete your account
  • Manage Cookies - Accept or decline cookies through the consent banner or your browser settings
  • Opt-Out of Emails - Toggle off blog notifications in your account settings
  • Data Portability - Request a copy of your data in a portable format
  • Withdraw Consent - Revoke email consent or delete your account at any time

For GDPR (EU), UK GDPR, or CCPA (California) requests, please contact us using the information below.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Disclaimer

FPL Lab is not affiliated with Fantasy Premier League or the Premier League. All trademarks are the property of their respective owners. We are an independent service providing analysis and tools for FPL managers.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our website or social media channels.