Privacy Policy
The short version: no analytics and no tracking, ever. The tools need no account — in that state nothing you enter reaches us and this site sets no cookies at all. An account is optional; make one and we hold your email address, your plan and your Team ID, and two cookies keep you signed in.
Summary
EasyFPL is a static website. The analysis runs in your browser, not on a server we control. Using the site requires no account and no email address, and we never ask for your Fantasy Premier League password — the tools only ever need your public Team ID.
There is one exception, and it is opt-in: you may create an account. If you do, that account has an email address and a password, and both are held by our authentication provider. Everything below distinguishes between the two cases, because they are genuinely different.
Without an account nothing about you reaches us at all: your Team ID, your drafts and your settings live in your own browser and stay there. With an account we hold your email address, your plan and your Team ID, and nothing else.
What we collect
If you do not make an account: nothing. There is no analytics platform and no server-side log of who you are or what you looked at that we can read. Every tool on this site works in that state.
If you do make an account, we hold exactly three things about you, and you can see all three:
| Held | Why |
|---|---|
| Your email address | It is how you sign back in, and how a password is reset |
| Your plan | Free or Premium, and the date it runs to |
| Your FPL Team ID | So a second device knows your squad without you retyping the number |
That is the whole record. It is stored with Supabase, our authentication provider, and it is protected by row-level security so that an account can read its own row and no other.
In neither case do we collect:
- Fantasy Premier League passwords or login credentials, ever, for any reason
- Payment details — billing is not switched on, and when it is, card details will go to the payment processor and never to us
- Behavioural or advertising profiles
- Any record of which pages you opened or which players you looked at
When you enter a Team ID, your browser requests that team's public data directly from the official Fantasy Premier League API. That request passes through a lightweight proxy we run, which exists solely because browsers block direct cross-origin requests to the FPL API. The proxy forwards the request, briefly caches the public response to reduce load on the official API, and does not build any profile of who asked for what.
What your browser stores
To avoid making you retype things, the site saves a small amount of data in your browser's local storage. This is not a cookie, it is never transmitted to us, and you can clear it at any time.
| Stored item | Why |
|---|---|
| Team ID | So you do not re-enter it on every visit |
| Mini-league ID | Same, for the League Rivals tool |
| Draft plans & notes | Your multi-gameweek plans and any notes you write against them |
| Shortlist | Players you have flagged to watch |
| Analysis settings | Your chosen presets, weightings and sensitivity |
| Interface preferences | Theme, sidebar state, which panels you left open |
| Your club badge, if you set one | The image itself, kept in this browser. It is never uploaded, which is also why it does not follow you to another device |
To erase all of it, clear site data for easyfpl.com in your browser settings, or use a private browsing window. The site will simply ask for your Team ID again next time.
EasyFPL also registers a service worker, which caches pages and assets on your device so the site loads quickly and keeps working on a poor connection. This is a local cache. It stores no personal information and sends nothing anywhere.
Third parties
We run no advertising and no analytics. However, loading any website involves requests to whoever hosts its files, and those hosts can see your IP address as a normal consequence of serving you a page. In the interest of being straight with you, here is every third party involved:
| Service | Purpose | What it can see |
|---|---|---|
| Cloudflare | Hosting and the API proxy | Standard request data, including IP address |
| Fantasy Premier League | All player, team and squad data | Requests for public FPL data |
| Google Fonts | Typefaces | IP address when fonts are fetched |
| jsDelivr | Charting and icon libraries | IP address when scripts are fetched |
| Premier League media | Player and club imagery | IP address when images load |
| News feed sources | Headlines on the News page only | IP address when that page fetches feeds |
None of these receive your Team ID as personal data, your draft plans or your settings. Each operates under its own privacy policy.
Cookies and tracking
There is no tracking of any kind. No analytics script, no tag manager, no advertising pixel, no fingerprinting. This is not a promise we ask you to take on trust — it is a property of the code, which contains no such integrations, and you can confirm it in the network tab of any browser.
Two cookies exist, and only while you are signed in to an account. If you never make one, this site sets no cookies at all.
| Cookie | What it is | How long |
|---|---|---|
| easyfpl_at | The access token that keeps you signed in | Until it expires, typically an hour |
| easyfpl_rt | The refresh token that renews the one above without asking you to sign in again | 30 days |
Both are set Secure and SameSite=Lax, both are readable only by this site, and signing out deletes both. They carry a session and nothing else: no identifier that follows you to another site, and nothing that describes what you did here.
Under the UK and EU rules, consent is required for cookies that are not strictly necessary — analytics, advertising, and anything that profiles you. It is not required for a cookie whose only job is to keep you signed in to a service you asked to sign in to. Those two are the only cookies here, and there is no analytics or advertising of any kind, so there is nothing a banner could ask you about. If that ever changes, a banner will appear before the change ships, and the date at the top of this page will say when.
Children
EasyFPL is a football statistics tool intended for a general audience and is not directed at children under 13. Since we collect no personal data from anyone, we hold no data about children either.
Your rights
Data protection law gives you rights to access, correct, export and delete personal data an organisation holds about you. We hold none, so in practice:
- Access and export. Everything is already on your device, in your browser's local storage.
- Deletion. Clearing site data for easyfpl.com deletes it completely and immediately. You do not need to ask us.
- Objection. There is no processing to object to, because there is no processing.
If you email us, we hold that email as long as needed to reply to you. Ask us to delete it and we will.
Changes to this policy
If the site ever adds something that changes the picture above — analytics, accounts, or anything that collects personal data — this page will be updated before that change ships, and the date at the top will say when. We will not quietly start collecting data and update the policy afterwards.
Contact
Questions about privacy, or anything else, go to [email protected]. More ways to reach us are on the contact page.
Not affiliated with the Premier League. EasyFPL is an independent project. It is not associated with, endorsed by, or connected to the Premier League, Fantasy Premier League, or any club. All club names and badges are the property of their respective owners.