Privacy

Privacy policy

This notice explains how FPL Mania handles personal data when you use the site.

Controller and contact

FPL Mania is operated by its independent owner and controller.

Contact email: contact.fplmania@gmail.com

Questions about this notice, data handling, or rights requests can be sent to that address.

Data this site processes

  • The FPL team ID you submit.
  • Public Fantasy Premier League data returned for that team, including public manager name, team name, squad data, chip history, and transfer history.
  • An anonymous session identifier stored in the fplmania_session cookie.
  • Planner actions taken during the session, such as transfers, captaincy changes, chip selection, and committed gameweeks.
  • Temporary server-side planner state stored in Postgres to keep the active workspace available while you use the site.
  • Manually saved draft state when you choose to save a draft.

How and why the data is used

FPL Mania uses this data to load a public FPL squad, reconstruct the current planning context, run the planner interface, apply FPL rules, keep your in-progress plan available across requests during the same browser session, and restore a draft only when you choose to save and load one.

The legal basis is GDPR Article 6(1)(f), the controller's legitimate interest in operating a requested FPL planning service safely and consistently. The site does not use the data for advertising, newsletter delivery, or behavioral profiling.

Where the data comes from

Some data is collected directly from the site visitor, such as the submitted team ID and planner actions.

Other data is obtained indirectly from publicly accessible Fantasy Premier League endpoints. That matters when a visitor loads a public team that may belong to another person.

Recipients and transfers

FPL Mania fetches public squad and player data from the official Fantasy Premier League public API at fantasy.premierleague.com.

The site is hosted on Render and uses Postgres for account data, temporary planner state, manually saved same-browser drafts, and short-lived infrastructure caching.

The site does not currently use analytics, advertising pixels, payment processors, account logins, or browser-side CDN assets for the main interface.

If the hosting provider or infrastructure later changes, this notice should be updated to reflect any additional processors or international transfers.

Retention

The fplmania_session cookie is a session cookie and is intended to end when the browser session ends.

Server-side active planner state expires after 24 hours of inactivity. Manually saved browser and account drafts expire after 30 days of inactivity and are reset when their first planned gameweek is no longer the upcoming gameweek. Cached upstream FPL responses are stored temporarily to protect the service from repeated identical requests and expire automatically after short retention windows.

Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, objection, and data portability where those rights apply.

You may also lodge a complaint with a competent EU or EEA supervisory authority, including the authority in your habitual residence, workplace, or the place of the alleged infringement.

What the site does not do

  • No FPL login is requested.
  • No private FPL credentials are stored.
  • No payment card or billing data is collected.
  • No automated decision-making under GDPR Article 22 is used.

Changes to this notice

FPL Mania may update this privacy policy as the product, hosting, or legal setup changes. Material updates should be reflected on this page before the changed processing begins.

Last updated: July 5, 2026.