Privacy notice
You can use FPL Edge without an account, and then it asks for no name, email or password. An account is optional, for buying Pro. This page sets out the personal data the site handles either way, and what you can ask of us about it.
Last updated 27 September 2026
Who is responsible
FPL Edge is run by GameMind Labs Limited, the controller of the personal data described here. Write to viraj.vaitha@gamemindlabs.com about anything on this page.
What we process
- The FPL team ID you enter, and the league you choose. We use them to fetch that team's public data from Fantasy Premier League (FPL) and show it back to you. They are kept in a cookie on your device, not in a list of who looked at what.
- Other managers' public names and team names, with their ranks, points and squads, which FPL publishes for every member of a league. When you open a league we fetch them from FPL to compare squads across it.
- Essential cookies:
fpl_session, holding your team ID and league and the FPL season they are from, signed so it cannot be edited; andfpl_refreshed, set for two minutes when you refresh data. If you sign in, Clerk sets the cookies that keep you signed in. There are no analytics, advertising or tracking cookies. These are strictly necessary for a service you asked for, so they need no consent banner. - If you create an account: your email address, and your name or a password if you give them, held by Clerk, which runs sign-in for us. On the account we keep your plan and when it ends, the Stripe customer reference of your purchase, and up to three team IDs you have used while signed in. Signing up is checked by Cloudflare's Turnstile, which looks for automated sign-ups.
- If you buy the Season Pass, Stripe takes the payment on its own page. We receive what Stripe gives the merchant: your name, email address, the country of your card and the amount, never your card details.
- Your IP address, to limit how much one visitor can make us ask of FPL: how many different team IDs, forced refreshes and new leagues. It is held only as counters that expire with their window: ten minutes, two minutes and a day.
- Server logs. Our hosting provider records each request (your IP address, the page asked for, your browser's user agent and the time), and our own logs record the paths asked of our API, which include team and league IDs, any errors and, when you are signed in, your account's ID (never its email).
- Usage statistics: which pages are viewed, from what kind of device and country, and how fast they load, counted by Vercel Web Analytics and Speed Insights. They set no cookie and store nothing on your device; a visit is told apart from another by a hash of the request that is discarded within a day, and nothing in them identifies you.
- If you donate, Stripe takes the payment on its own page. We receive what Stripe gives the merchant: your name, email address and the amount, never your card details.
Why, and on what basis
We process this data to show you the analysis you ask for, to keep the service working, fast and secure, and to keep our requests to FPL within what it tolerates (see our requests to FPL).
Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): our interest in providing the service you asked for, and in keeping it secure and within FPL's limits. We think the impact on you is small: the FPL data is already public, it is shown only to people who ask about that league, and nothing is used for marketing or profiling. An account, and a Season Pass on it, is processed because it is needed for the contract you ask us to enter (Article 6(1)(b)). Payment and donation records are kept because tax law requires it (Article 6(1)(c)).
Who else handles it
We do not sell personal data or share it with advertisers. These companies process it for us, under their data processing terms:
- Vercel Inc. hosts the site and its servers, which run in London, keeps the request logs, and counts the usage statistics.
- Upstash, Inc. runs the database that caches FPL's data and holds the visitor limits.
- Clerk, Inc., only if you create an account, holds it and runs sign-in. Cloudflare runs the check on sign-up for Clerk.
- Stripe, only if you buy the Season Pass or donate, processes the payment.
Where one of them handles data outside the UK, the transfer relies on the safeguards in its data processing terms.
How long we keep it
- The session cookie lasts until the end of its FPL season (1 September after the season's last gameweek, since FPL gives every team a new ID each summer), or until you change team ID.
- FPL data we fetch is cached for up to three days, and a squad or score that can no longer change for up to a fortnight. That a team or league does not exist is remembered for ten minutes.
- Which leagues were opened recently is kept for a fortnight.
- Visitor limit counters expire within a day at most.
- Logs are kept only as long as our hosting plan retains them, which is days rather than months. Usage statistics are kept in aggregate, for as long as the plan reports them.
- An account is kept until you ask us to delete it. The team IDs on it are replaced as you use others, three at most.
- Payment and donation records are kept for as long as UK tax law requires.
Your rights
You can ask for a copy of the personal data we hold about you, and ask us to correct or delete it, restrict what we do with it, or stop processing it: you have the right to object to processing based on legitimate interests. That includes a manager whose name appears here because someone opened their league. Write to viraj.vaitha@gamemindlabs.com; we answer within a month.
You can also delete the cookie at any time, or choose “Change team ID” from the menu or the foot of any page. To delete an account, write to us from its email address; a payment record we must keep for tax stays with Stripe. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
When this notice changes, this page changes with it and the date at the top moves.