Privacy policy

This site stores a small amount of data that can be traced back to a person, so it needs a policy explaining exactly what and why. It's short, because there isn't much of it.

Last updated: 21 October 2026

Who is responsible

FPL Buddy is an unofficial hobby project run by an individual in the United Kingdom. For data protection purposes that individual is the data controller. You can reach them at contact (at) fpl.mfhost.co.uk.

What is stored

There are no accounts on this site. There is no sign-up, no password, and no payment information. The only identifier used is your FPL ID — the number in your Fantasy Premier League team URL — which you type in yourself.

Against that ID, the following is stored:

• Your saved team — the squad you build here before a deadline, so it loads on any device you enter the same ID on.
• Your squad for past gameweeks — captured after each deadline from Fantasy Premier League's own public API.
• The projected points this site's model gave each of those players at the time. This is the only part that doesn't exist elsewhere, and it's the reason the record is kept at all: it's what makes "predicted versus actual" answerable later.

Something you should know

Because an FPL ID is just a number, anyone can enter anyone's. If someone enters your ID, this site will store that team's public squad history even if you have never visited. The underlying data is already public on Fantasy Premier League's own site, and no private information is involved — but it is happening, and you should be told rather than have to work it out.

For the same reason, a saved team is not private. Anyone who knows your FPL ID can view and overwrite it. Don't put anything in it you would mind a stranger seeing or changing.

Lawful basis

Legitimate interests — running a free tool that compares predictions against real results. The data used is already publicly available through Fantasy Premier League, and none of it is sensitive. If you would rather not be included, ask and it will be removed.

How long it is kept

Manager data is deleted automatically after 24 months. A scheduled job enforces this — it isn't a promise to remember to do it manually. Two seasons is enough for year-on-year comparison, which is the only reason to keep anything.

Your rights

You have the right to ask what is held about you, to have it corrected, and to have it deleted. Email contact (at) fpl.mfhost.co.uk with your FPL ID and it will be actioned — there is no charge and no form to fill in. You can also clear a saved team yourself at any time using the Change ID button.

If you are unhappy with how a request is handled you can complain to the Information Commissioner's Office.

Cookies and local storage

This site sets no cookies. It uses your browser's local storage for two functional things: remembering the FPL ID you typed, and remembering which tab you were on. Both stay on your device, are never transmitted anywhere, and are cleared when you clear your browser data. Under PECR these are strictly necessary, so no consent banner is required.

Visitor measurement

This site uses Cloudflare Web Analytics to count page views. It sets no cookies, stores nothing on your device, and does not fingerprint you or follow you between sites — there is no identifier that could recognise you on a second visit, so no profile of you is built here or anywhere else.

What it records for a page view is the page address, the referring site, and coarse details of your browser, device type and country. It does not record your IP address, and none of it is linked to your FPL ID or to a saved team. Because it neither stores nor reads anything on your device, PECR does not require consent for it and there is no banner to click.

If advertising is ever added, that will change — this page and a consent banner would both go up before any advertising cookie is set, not after.

Where the data comes from

Player, fixture and team information comes from the public Fantasy Premier League API and from ClubElo. Neither receives any information about you from this site.

Security

Data is held in a single database file on a server controlled by the site owner. Nothing in it is sold, and nothing in it is shared with a third party. The site is served through Cloudflare, which therefore handles requests in transit and processes the anonymous page-view counts described above; that is the only third-party processing involved, and it does not extend to the manager data in the database. If you believe you have found a security problem, please email security (at) fpl.mfhost.co.uk rather than reporting it publicly.