Privacy Policy

FPL iQ · last updated 12 September 2026 · v4

What we ask you for

Your FPL team ID, the public number that appears in the address bar when you open your own points page on the official site. It identifies a team, not a person, and anyone can look it up.

We never ask for your Fantasy Premier League login or password. If any site or app claiming to be us ever asks for your FPL password, it is not us.

Where your team ID goes

To show your squad, the app asks the official Fantasy Premier League API about your team. Where that request goes depends on which version you are using:

• The Android app: the request goes straight from your phone to the official FPL API. There is no server of ours in that path.
• The website: browsers are not allowed to call the FPL API directly, so the request passes through our proxy, which forwards it and returns the answer. Your team ID appears in the web address of that request. We do not keep it in any database from that path; our hosting provider keeps short-lived technical logs (including IP addresses) for security and reliability, as essentially every website does.

Either way, your team ID is saved on your own device so you don't have to type it again. You can change it from your profile, or clear it by clearing the app's storage.

Accounts (optional)

You can use FPL iQ without an account. If you create one, sign-in is handled by Firebase Authentication (a Google service) with the method you choose, Google, or an email address and a password that you set for FPL iQ only (the address is then confirmed by a link we email you). Firebase holds what that method gives it: your email address, your display name where Google supplies one, and the date the account was created. We never see your Google password. Facebook sign-in is not offered.

In our database (Firebase Firestore) we store, against your account:

• the username you choose and the club you say you support
• your FPL team ID, so a new device opens straight to your squad
• the date your email or sign-in identity first signed in, which is what makes the free season free for you and fixes your founder discount, and how many times you changed team this season (an account follows one team per season, like the official game). These two records are kept even if you delete the account, so that deleting and re-creating it cannot restart the free period or claim a founder discount that was not earned. They contain nothing else.

You can edit your username and club, add or change your password, and delete the account at any time from your profile in the app. Deleting removes the account and your profile immediately.

Notifications

Alerts are part of the Android app rather than a setting inside it: the first time your squad loads, Android asks whether FPL iQ may send notifications, and that permission is the only switch. If you allow it, your phone registers with our small notification service (hosted on Cloudflare) so that it can be woken before a deadline. That service stores the push token Google assigns to your device, the language your phone reads, and the next deadline your phone reported. It never learns your team, your squad or your plans: it only says "time to check", and the phone works out what to say from data already on it. Turning notifications off for FPL iQ in your phone's settings, or uninstalling the app, ends that. On the website, alerts are computed on your device.

What we store on your device

All of this stays in your own browser storage:

• your team ID, so the app opens straight to your squad
• a copy of the last data we loaded, so the app still opens when you're offline
• your transfer plan drafts, free-transfer setting, theme and language
• recent price-progress readings, used to estimate how fast a price is moving
• your track record, rival and gameweek wrap, all computed from public data
• if you are signed in: the account's team and the date it first signed in, so the rules above hold offline

What we don't do

• No advertising, and no advertising trackers.
• No selling or sharing of data with third parties. Firebase and Cloudflare process data only to run the features above.
• No email list. We email you three things and nothing else: the link that confirms your address, a password reset when you ask for one, and one welcome note when the account is created. They are sent by our own sender (a Cloudflare service using an FPL iQ mailbox), so your address passes through it.
• No location, contacts, camera, microphone or file access.

Where the data comes from

All football data, players, prices, fixtures, points and your squad, comes from the public Fantasy Premier League API. FPL iQ only reads it. The app cannot make transfers, change your team, or take any action on your FPL account, because it never has access to it.

Children

FPL iQ is a companion for a football game and contains nothing inappropriate for younger users. We do not knowingly collect personal information from children; an account is not needed to use the app.

Your rights

Everything on your device is yours to clear at any time. For an account, your profile is editable and the account is deletable from inside the app; if you need anything exported, corrected or deleted beyond that, email us at the address below and we will do it.

Changes

If we add something that collects more data, we will update this page and say plainly what changed, before it ships. Version 3 added the optional account and the notification service. Version 4 records that alerts are no longer a setting in the app, that the notification service never held a team ID, and the welcome email.

Contact

Questions about this policy: iheblswd@gmail.com