Privacy Policy

What we collect

When you create an FPL Guru account, we collect your account email and display name. If you connect your Fantasy Premier League team, we collect your FPL team ID. When you use the MCP connector to bring FPL Guru into an AI assistant, we collect the tool-call requests your assistant makes on your behalf.

When you send feedback through the in-app feedback form, we store your message along with the page you were on, your browser's user-agent string, your window size, and details of the most recent API error your session hit, if there was one. That last part is what lets us reproduce a bug instead of guessing at it. Feedback is stored against your account, and we use it only to act on what you told us — if we turn your report into a tracked issue, your message and that technical context go into our private GitHub repository, together with a reference number for the feedback itself. Your email address does not. What we file there stays there after you delete your account: deleting your account removes the feedback we hold, but we cannot retract an issue from the tracker. Your message is your own words, so anything personal you write into it travels with it.

Alert emails (deadline reminders, injury news and price changes) go to your account email only after you turn an alert type on and confirm the address. Every alert email has a one-click unsubscribe link. Your alert settings are deleted with your account. If an alert email bounces or is marked as spam, we keep only a record that the address must get no more alert email, also after you delete your account.

What we don't collect

• Your AI conversations. Only the specific tool calls your assistant makes reach us — we never see the rest of your conversation.
• Payment card data. No payment provider is currently integrated.

Processors

FPL Guru relies on the following processors to operate:

• Supabase — authentication and data storage.
• Amazon Web Services (AWS) — application hosting on Amazon Lightsail, Asia Pacific (Mumbai) region (ap-south-1), and website hosting on Amazon S3.
• Cloudflare — CDN and DNS.
• PostHog — product analytics.
• OpenAI — powers the AI chat features.
• Typesafe — helps decide which tools the AI chat uses. It receives your chat messages as you wrote them, plus your squad context. We do not add your email address or account ID to these requests.
• AutoSend — sends our emails: the newsletter and the alert emails. If you have a Guru account with a linked team, the newsletter can include your own Missed with Guru numbers for the week, sent only to your own address.
• GitHub — issue tracking for feedback we act on.

Retention

We keep your account data until you delete your account — with two exceptions noted above: feedback we have already turned into a GitHub issue stays in the issue tracker, and we keep a record that an address must get no more alert email when an alert email to it bounced or was marked as spam. Tool-call logs from the MCP connector are operational and short-lived.

Your Rights

You have the right to access, correct, and delete your personal data. Contact us using the details below to exercise any of these rights.

Contact

For privacy-related questions, email us at [email protected] or visit our contact page.