Privacy policy

What stays in your browser

This is the whole of it. All four are stored by your browser on your device and are never transmitted to us — we could not read them if we wanted to.

Clearing this site’s data in your browser deletes all four permanently. There is no copy anywhere else. That is also the catch, and the Squad Planner says so where it matters: use Share to keep a squad as a link if you want it to survive.

What we hold, and it is not much

No account, no password, no email address, no name, no date of birth, no location, no payment details. We do not ask for any of it because there is nothing here that needs it. The one table that records what happens on the site holds actions, plus a scrambled code per visitor so the site can tell whether people come back (explained below). It holds no name, no email, no IP address and no browser details, apart from that one word: phone, tablet or desktop.

Two things do pass through a server without being kept:

• Your FPL Team ID, if you load your team into the Squad Planner. It is sent to this site so it can fetch your squad from the Fantasy Premier League’s own public service, and it is not written down at either end. An FPL Team ID is already public — it is in the URL of your own team page on the official site.
• A feedback message, if you send one. It goes to a personal inbox by email and nowhere else. Adding a contact address is optional and only exists so there can be a reply; leave it blank and the message still arrives. The lawful basis is legitimate interests — you wrote to us, so we read it.

Cookies and analytics

Four tools, treated differently on purpose.

• Without cookies, and without asking. Vercel Web Analytics counts page views, referrers, country and device type. It sets no cookies and stores nothing on your device, so none of it can be tied to you, recognised on a later visit, or followed to another site — it is counting pages, not people. There is nothing here to consent to and nothing to opt out of.
• Without cookies, and without asking. This site keeps its own record of what gets used: which sections of a player page or the dashboard you reach, whether you press anything inside a dashboard section (a sort, a filter, a toggle, a link), how far down an article you read, when a comparison is opened, when a Team ID is connected, that you opened the home page or a club page (it notes which of the two and nothing else, and counts toward the same daily visitor total as everything else here), and what you type into the search boxes. On the player pages and the dashboard each of those also notes whether your screen is a phone, a tablet or a desktop, worked out from the width of your window and nothing else. It is how the site works out which parts are worth keeping. It sets no cookies and stores nothing on your device.
  
  To count how many people come back, it also stores a scrambled code made from your IP address and browser details. The code is made on our server with a secret key and is the only thing saved; the address and browser details are thrown away. The key is replaced every 90 days and the old one destroyed. After that, the old codes can’t be matched to any connection, by us or anyone else. The code isn’t used for advertising, isn’t shared, and isn’t combined with Google Analytics or Clarity.
  
  The lawful basis is legitimate interests: knowing whether readers come back is how the site decides what’s worth keeping, and a code that can’t name you is the least it can use to find out. If your browser sends Global Privacy Control or Do Not Track, no code is made for you at all.
• With cookies, only if you accept. Google Analytics measures the same reading behaviour, plus whether visitors come back. It stays off until you choose Accept, and choosing Only what’s necessary leaves it off — the tag is not loaded at all until you say yes, with every advertising and analytics permission denied by default. Nothing on this site is withheld either way, and declining is exactly as easy to press as accepting.
• With cookies, only if you accept. Microsoft Clarity records how people actually use pages — heatmaps of where they click, and session recordings of the mouse and scroll movements behind them — so we can see where a page is confusing rather than only that it was visited. Same rule as Google Analytics: off until you choose Accept. We also tell Clarity directly, every time, not to use its advertising cookies — only the analytics ones.

You are not asked the moment you arrive — the question waits about twenty seconds, on the grounds that nobody should have to make a decision about a site before they have seen any of it. Nothing is set on your device in the meantime. To change your mind later, clear this site’s cookies and the question is asked again.

Who else is involved

Some of these operate outside the UK, under standard contractual clauses. Nothing is sold, and nothing is shared with anyone for advertising.

How long anything is kept

Google Analytics data is retained for 14 months and then deleted automatically. Most Microsoft Clarity session recordings are kept for 30 days; a sample it selects itself, and anything we mark as a favourite, can be kept for up to 9 months, as can heatmaps. The cookieless page counts hold no record tied to you at all. The site’s own record of what gets used is kept in full for 90 days. After that the detail is deleted and only daily totals are kept: how many times each page and section was used that day. The scrambled codes are kept so return rates can be compared over time, and can’t be linked to anyone once their key is destroyed. A feedback email stays in an inbox until it is deleted, like any other email. Everything else is in your browser and lasts exactly as long as you let it.

Third-party data

The Fantasy Premier League data shown here comes from the Premier League via Pulselive and remains subject to the Premier League’s own terms and conditions. We hold no rights in it, we do not redistribute it, and this site is free and non-commercial.

Your rights

You have the right to ask for a copy of any personal data held about you, to have it corrected or deleted, to object to it being processed, and to withdraw consent at any time. In practice there is almost nothing to ask for — but ask anyway if you want to know. Email hello@fplanalyticsdashboard.com and you will get an answer within one month. If you are not satisfied you can complain to the Information Commissioner’s Office at ico.org.uk.

To object to the scrambled code, switch on Global Privacy Control or Do Not Track in your browser settings, and no code is made from then on. Codes made before that can’t be picked out, because we can’t tell which one is yours.