Privacy Policy
FPL Waiver Line ("we", "us", "the service") is an independent, fan-built tool for Fantasy Premier League Draft managers, operated by a UK-based sole trader. This policy explains what personal data we collect, why, and your rights over it. We are the data controller for the data described here. Questions or requests: [email protected].
What we collect and why
Your league connection
When you connect a league we store your FPL entry ID and
the league ID it belongs to. These are public Fantasy
Premier League identifiers, not sensitive personal data. We use them to
fetch your league's public data and generate suggestions.
Lawful basis: necessary to provide the service you asked for.
Basic usage analytics
We keep a first-party log of which pages are viewed and when, and — if you
have connected a league — the FPL entry ID that viewed them, plus a coarse
traffic source (for example a marketing tag such as utm_source,
or the website you arrived from — never a full web address). We use this only
to understand which features are useful and to improve the tool; it is our
own log on our own server. We also use Cloudflare Web Analytics,
a privacy-friendly, cookieless analytics tool, to count
visits and page views — it sets no cookies and does not track you across
other websites. There is no advertising.
Lawful basis: our legitimate interest in understanding and
improving the service.
A functional cookie
We set one signed cookie that remembers which league you connected, so you don't have to reconnect on every visit. It contains no tracking identifiers and is not shared. This is a strictly necessary cookie, so no consent banner is required for it under UK PECR.
Server logs
Our server keeps standard technical logs (such as IP address and browser
type) for security and to keep the service running. These are rotated and
not used to identify or profile you.
Lawful basis: our legitimate interest in operating a secure,
reliable service.
Newsletter email (optional)
If — and only if — you choose to opt in on the League page, we store the
email address you provide so we can send you an occasional
(roughly weekly) digest of waiver targets and gameweek pointers for your
league. Ticking the consent box is required; we never add you without it.
You can unsubscribe at any time from the League page or via the link in any
email, after which we delete your address. We do not share it with anyone or
use it for advertising.
Lawful basis: your consent, which you can withdraw at any time.
What we do not collect
We never ask for or store passwords, payment details, your home address, or any special-category data (such as health or political data). Because we use only public FPL data, we never see your FPL account password. Apart from a newsletter email if you opt in (above), we collect no other contact details, use no advertising, and do not track you across other websites.
Where your data goes
We read public data from the Fantasy Premier League Draft service (operated by the Premier League); we are not affiliated with or endorsed by them. Our website runs on our own server, delivered through Cloudflare, which acts as a content-delivery network and security proxy (and provides the cookieless Web Analytics noted above), so your requests pass through Cloudflare's network. We do not sell your data to anyone, and we do not use it for advertising.
How long we keep it
We keep your league connection while you use the service. If you opt into the newsletter, we keep your email until you unsubscribe, then delete it. Usage-analytics records (our page-view log) are kept for up to 6 months and then automatically deleted. Technical server logs are kept for a short period and then deleted.
Your rights
Under UK data protection law you have the right to access, correct, delete, restrict, or object to our use of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, email [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Children
The service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us their data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed.