Privacy

Last updated 9 September 2026

This page covers two separate things: the FPL Now app, which collects almost nothing, and this website, which holds an email address only if you choose to give one. Nothing moves between the two.

The app

FPL Now has no accounts. There is no sign-up, no login, no password, and no account profile. The app does not ask for your name or email. Push identifiers are linked to the public FPL team ID you follow; that public team can contain a manager name.

What the app stores, and where

• Your FPL team ID — the public number in the URL of your Fantasy Premier League points page. You enter it once; it is stored on your device. The data it unlocks (your squad, your points) is already public on the FPL website to anyone who has the number. The app never asks for your FPL login and cannot see anything your login protects.
• On our server, so live scores can reach your Lock Screen: your device's push token (an opaque identifier issued by Apple), the team ID it follows, and — while a Live Activity is running — that activity's own token, the gameweek and season it belongs to, alert preferences, automatic-start preference, APNs environment, an activity-update sequence number, whether the app reports an active decision-engine entitlement, and a remote-notification token for price reminders. We also store a last-updated timestamp. These are device-linked records, not anonymous data. Disconnecting removes the active registration. The registry keeps short-lived deletion markers to prevent delayed writes restoring old state. Inactive records and deletion markers expire after 90 days, with cleanup within the following day. The registry has a durable store and a KV mirror; platform backup retention may outlast active storage.

Anonymized usage counts

The app counts how often a small number of things happen, so we can tell whether anyone uses what we built — a score card is shared, a team is connected, a live score starts, the subscription screen is shown, a subscription is bought, and similar moments across the price and planning screens. Each count carries the app version, the iOS version, and a random identifier the app makes up on first use — nothing else. Specifically not in these counts: your FPL team ID, any player or team name, your squad, and any purchase details. The random identifier is invented by the app, comes from nothing about you or your device, and is sent only in scrambled (hashed) form; it identifies an install, not a person, and we could not connect it to you. These counts are processed for us by TelemetryDeck, a privacy-focused analytics service, are never linked to any identity, and are never used for tracking or shared with anyone else.

What the app does not do

• No advertising, and no ad SDKs.
• No third-party tracking SDKs, and no cross-app tracking — which is why the app never shows Apple's tracking-permission prompt: there is nothing to ask about.
• No selling, sharing, or brokering of data.
• No reading of your contacts, location, photos, or anything else on your device beyond what is listed above.

The app reads two public data sources: the Fantasy Premier League API (factual match and points data) and pre-match betting odds from a licensed odds data provider. Odds are informational only — the app takes no wagers and links to no betting operators.

This website

This site is static pages. It sets no cookies, runs no analytics, and loads no third-party scripts, fonts, or trackers. That is why there is no cookie banner: there is nothing to consent to.

It is served by Cloudflare, which — like any host — processes standard connection data (such as your IP address) transiently to deliver pages and protect against abuse. We do not receive or keep access logs.

The launch-notification email list

If the sign-up form is available and you choose to use it, we hold one thing: your email address, and use it for one purpose: telling you when the app launches and, later, occasional FPL Now updates if you have opted into them. Specifically:

• Double opt-in. You get a confirmation email first; nothing is stored on the list until you click it.
• Unsubscribe in every email, one click, no questions.
• Erasure on request — email us and the address is deleted.
• The list is held by our email delivery provider (named on the form itself), not on our own servers, and is never connected to the app: the app does not know your email exists, and the list does not know you use the app.
• It is never sold, shared, or used for anything else.

Your rights

Under the GDPR, UK GDPR, and similar laws you can ask what we hold about you, ask for it to be corrected or deleted, and withdraw consent at any time. For the app the honest answer to "what do you hold about me" is: a device token issued by Apple, which names no one on its own but is stored next to the public FPL team ID you follow — and a public FPL team can carry a manager name, so treat it as a record about you rather than an anonymous one — together with the other device fields listed above. The anonymized usage counts are separate: they are keyed to a hashed random identifier, are not joined to the device record, and carry no team ID. For the website it is: your email address, if and only if you gave it. Requests to the address below are answered by a person.

The legal details, plainly

• Who is responsible (the controller): the developer identified on the App Store listing and in the EU trader details shown on the product page; the contact below reaches us.
• Why we may hold the device record (lawful basis): legitimate interest — delivering the live-score Live Activity you asked for needs an address to push to, and there is no lighter-touch way to do it. The anonymized usage counts rest on the same basis: knowing whether a feature is used at all, measured in the least identifying way we could design. The email list is held on consent (the double opt-in), withdrawable any time.
• How long: disconnecting your team in the app removes the active registration, and a record we have not heard from expires after 90 days, with cleanup running within the following day. The registry also keeps a short-lived deletion marker, on the same 90-day clock, so a delayed write cannot restore state you removed. Removal covers the registry's durable store and its KV mirror; platform backup retention can outlast active storage, so erasure is not instant everywhere. No manual request is needed for the app; email us for the newsletter list.
• Who processes it for us: Apple (delivers the push), Cloudflare (the small registry and the website), DigitalOcean (the server that computes matchday updates), TelemetryDeck (the anonymized usage counts only), and the named email provider (the newsletter list only). No one else, and nothing is sold or shared.
• An APNs token is personal data under the GDPR even though it names no one — which is why it is covered here in full rather than described as anonymous.

Contact

[email protected]

Changes

If this policy changes, the date at the top changes with it. Any change to what is collected will be called out explicitly, not buried in rewording.

9 September 2026. The list of what our server stores was incomplete. Four fields it already held are now named: your automatic-start preference, an activity-update sequence number, whether the app reports an active decision-engine entitlement, and a remote-notification token used for price reminders. A fifth, the APNs environment, is the same field earlier versions described as "whether the app is a TestFlight or App Store build", now under its own name. Nothing new is being collected; the description was short of the truth and is now complete. Two claims were corrected rather than reworded. First, the device record is stored next to the public FPL team ID you follow, and a public FPL team can carry a manager name — so we no longer say we hold nothing that connects the record to you. Second, deletion is now described as it actually works: a deletion marker, a 90-day expiry with cleanup the following day, and platform backups that can outlast active storage.

FPL Now is an independent, fan-made app. It is not affiliated with, endorsed by, or sponsored by the Premier League or Fantasy Premier League.