FPLPulse (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use https://fplpulse.com.
1. Information We Collect
Account information: name, email, a securely hashed password, and (optionally) your FPL team ID.
Subscription information: your plan and subscription status. Card details are entered on Stripe's pages and never reach us.
AI assistant messages: the questions you ask our in-app assistant, its answers, and short notes it keeps about your preferences, so it can give advice about your team.
FPL data: your squad, transfers, rank and league data, which FPL publishes for every team ID.
Usage data: pages visited, clicks, session duration, and interactions (via analytics such as Vercel Analytics / Google Analytics if enabled).
Cookies & tracking: to keep you signed in, remember preferences, and measure performance.
Contact information: when you email us.
Signup source: if you reach us from one of our adverts, we record which advert landing page you signed up from. This is stored against your account so we can measure which adverts work.
Aggregate page counts: we keep a daily tally of how many times each page on the site is viewed. These counts store no cookie, IP address, user agent or other identifier and cannot identify you or be traced back to you, so we collect them from everyone without needing your consent. On pages that require you to sign in, we additionally count how many distinct accounts viewed each page. That count is kept as a statistical estimate which can return only a total — it holds no record of which pages you individually visited — and is deleted after 90 days. We rely on our legitimate interest in understanding which features people use.
2. How We Use Your Information
Provide, maintain, and improve the site and features.
Personalise your experience (e.g., saving your FPL team ID).
Monitor performance and usage trends.
Communicate updates, support information, or offers.
Detect, prevent, and address security or technical issues.
3. Sharing Your Information
We do not sell your personal data. We share it only with the service providers below, who process it on our behalf, and with authorities where the law requires it.
Vercel: hosts the site and our servers, and routes AI assistant requests to AI model providers.
AI model providers (via Vercel's AI Gateway): receive your AI assistant questions together with your team details to generate answers.
Neon: our database (account, profile and subscription records).
Upstash: our cache (FPL data, AI assistant threads, connection tokens).
Stripe: payments and subscriptions.
Resend: sends account, service and update emails.
Google Analytics, Google Ads and PostHog: analytics and advertising measurement, only with your consent (see section 5).
Connecting an AI assistant (ChatGPT, Claude)
If you connect FPL Pulse to an AI assistant such as ChatGPT, you choose to share data with that assistant's provider, and their privacy policy then applies to what they receive. Specifically:
What the assistant can read: your FPL squad, bank, free transfers, chips, rank and live gameweek points (all public FPL data for your team ID), and FPL Pulse's predicted points. It cannot read your email address, password or payment details, and it cannot change anything in FPL or on FPL Pulse.
What we receive from the assistant: only the inputs to each request, such as player names, a position or a maximum price. We do not receive or store your conversation.
What we store: a hashed copy of the connection's access tokens, so we can recognise your requests and let you disconnect. Access tokens expire after one hour and unused connections after 90 days. We also keep a daily count of how often each tool is used across all users, which contains nothing that identifies you.
Disconnecting: remove FPL Pulse from the assistant's settings (in ChatGPT, under Settings → Apps), or email us and we will revoke every connection on your account.
4. Data Storage & Security
We use reputable cloud services and take reasonable measures to protect your data, including hashing passwords and connection tokens. However, no method of transmission or storage is 100% secure.
How long we keep it
Account, profile and AI assistant data: for as long as your account is open. Email us to delete your account and we will delete this data within 30 days.
Subscription and payment records: for six years, as UK tax law requires.
Cached FPL data: from minutes up to the end of the current FPL season.
AI assistant connection tokens: one hour for access tokens; 90 days of inactivity for a connection.
Analytics cookies: as listed in the table in section 5.
Children
FPL Pulse is not directed at children under 13, and we do not knowingly collect their data.
5. Cookies & Similar Technologies
We use cookies and similar storage technologies. Strictly necessary cookies are always active; all other categories are only used with your consent, which you give via our cookie banner and can change or withdraw at any time.
Strictly necessary — keep you signed in, maintain security, and remember your cookie choice. These cannot be switched off.
Analytics (consent required) — help us understand how the site is used so we can improve it. Providers: Google Analytics, PostHog, Vercel Analytics.
Advertising (consent required) — measure the effectiveness of our ads and campaigns. Provider: Google Ads.
We do not load analytics or advertising cookies until you accept them. You can update your preferences at any time:
Cookies we use
Provider
Cookie / storage
Category
Purpose
Retention
FPLPulse
next-auth.session-token, next-auth.csrf-token
Strictly necessary
Keep you signed in and protect against cross-site request forgery.
Session / 30 days
FPLPulse
fpl_cookie_consent (local storage)
Strictly necessary
Remember your cookie preferences.
Until changed / cleared
Google Analytics
_ga, _ga_*
Analytics
Distinguish users and measure how the site is used.
Up to 2 years
PostHog
ph_*_posthog
Analytics
Product analytics and (where enabled) session replay to improve usability.
Up to 1 year
Vercel Analytics
None (cookieless)
Analytics
Privacy-friendly, aggregated page-view and performance metrics.
No cookies set
Google Ads
_gcl_au
Advertising
Measure ad conversions and campaign effectiveness.
Up to 90 days
Third-party retention periods are set by the providers and may change; see each provider’s own cookie documentation for the latest details.
6. Your Rights (UK & GDPR)
You have the right to: access your data; request corrections or deletion; restrict or object to processing; data portability; and withdraw consent where processing is based on consent.