Privacy

FPL Tips HQ is run by Jack Widnell, based in the United Kingdom. This explains what we do with your data. It is written to be read, not survived.

What we collect, and why

Your email address. Collected when you register. Used to identify your account, send your weekly briefing if you subscribe to HQ Pro, and contact you about the service. Lawful basis: contract — we cannot give you an account without it.

Your FPL team ID and the public data attached to it. When you connect your team we read data the Premier League already publishes: your team name, manager name, past season ranks, and — once a gameweek deadline has passed — your squad selections. We never ask for and never receive your FPL password. Lawful basis: contract.

Squad screenshots. If you upload one, the image is sent to Anthropic to extract the player names, then discarded. We do not store the image. We keep the list of players it contained. Lawful basis: contract.

Usage data. We keep a small set of first-party service counters needed to operate and evaluate limits. If you allow optional analytics, PostHog also receives five product milestones that tell us whether the squad-to-report journey works. We do not send screenshots, emails, FPL IDs, names, team details, grade letters, scores or recommendation contents. Lawful basis for optional PostHog analytics: consent.

Payment data. Handled entirely by Stripe. We never see or store your card details.

League tables and other managers

We show mini-league standings. Those standings, and the squads behind them, are published by the Premier League through its public API once a gameweek deadline has passed. We do not obtain them from you or from anyone else privately.

We take two positions here that go further than the law requires:

1. Before a deadline passes, we never show one manager another manager’s squad. Pre-deadline selections are private and we treat them that way.
2. We only analyse another manager when a person specifically asks. We do not speculatively grade every manager in every league. Lawful basis: legitimate interests — a direct question from a member of that league, about data already public.

If you appear in a league table here and want to be removed, use the removal link on that page or email us. We will suppress you and keep you suppressed. If a link was shared before then, other services may hold a cached copy we cannot retract.

Who else processes your data

• Neon — database hosting
• Vercel — application hosting
• Anthropic — reads squad screenshots to extract player names; images are not retained
• Resend — sends email
• Stripe — processes payments
• PostHog EU Cloud — optional product analytics, only after you allow it

We do not sell your data. We do not share it for advertising.

How long we keep it

Your account data for as long as the account exists, and 30 days after you delete it. Screenshots are never stored. PostHog event data is retained for 14 days. First-party operational counters are retained for up to 24 months.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to processing based on legitimate interests, or ask us to stop emailing you. Email us and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

We use essential cookies to keep you signed in and enforce anonymous screenshot limits. PostHog is not loaded and its analytics storage is not created until you choose Allow. You can change that choice at any time using “Analytics choices” in the footer; withdrawing consent clears the analytics identity and stops future capture.