Effective and last reviewed: 25 August 2026
Plain-language summary. Most FPL tools can be used without an account. FPL Analyzer stores feature state in your browser, fetches public FPL data when you provide a manager or league ID, and uses external processors for accounts, AI, voice, hosting, and optional analytics. Google Analytics and PostHog are off until you choose Allow all. If you allow them, PostHog also records a session replay of your visit; you can refuse the recording on its own in Cookie Settings while leaving analytics on. We do not run advertising cookies or intentionally sell personal information.
FPL Analyzer is the name used by the operator of www.fpl-analyzer.com. For privacy questions or requests, contact evgenimilushev3@gmail.com. This policy describes the product implementation reviewed on the date above; it does not claim that every privacy law applies in every location.
| When you use | Information processed | Why |
|---|---|---|
| The website | IP address, request time, URL, browser/device data, and operational logs received by the hosting platform and API routes. | Deliver the site, prevent abuse, diagnose faults, and keep it secure. |
| FPL analysis | The manager ID, league ID, player selections, transfers, and related public FPL account data you request. A manager ID can be linked to a named FPL profile. | Fetch and analyse public data from the official Fantasy Premier League API. |
| A local account | Username, email address, and a password verifier/hash. The new account system is backed by Supabase and maintains a compatibility record through Google Apps Script/Sheets. | Register, authenticate, and maintain the account. |
| Google Sign-In | Your Google profile name, email address, profile image, and OAuth tokens used to verify the sign-in. Tokens may be processed by Google and FPL Analyzer's API during authentication. | Authenticate without a local password and display the chosen profile. |
| Articles/community features | Profile details, post text, uploaded post images, votes, and moderation-related records. Published profile and post information is public. | Publish and operate community features. |
| AI and translation | Your prompts, recent conversation context, FPL squad/context included with the request, and text submitted for translation. | Generate the answer, plan, prediction, or translation you requested. |
| Image analysis | Uploaded squad screenshots or chat images. OCR is performed locally with Tesseract where that path is used; an image is sent through FPL Analyzer's API to Google Gemini when server/AI vision analysis is invoked or used as a fallback. | Recognise a squad or answer a question about the image. |
| Voice mode | Microphone audio, its transcript, the AI prompt/context, and response text used for speech synthesis. | Transcribe speech, generate an answer, and read it aloud. |
| Optional analytics | Google Analytics measurement data such as page views, interactions, approximate location, browser/device information, session statistics, and first-party analytics identifiers. | Understand aggregate use and improve the Service. This processing starts only after opt-in. |
| Optional analytics — session replay | PostHog product analytics, plus a replay of your visit reconstructed from the pages you open, clicks, scrolling, mouse movement and the rendered page content, together with browser/device information and a random visitor identifier. Text entered into inputs and password fields is masked and not collected. | Diagnose faults and find where the interface is confusing. Starts only after opt-in, and can be refused separately from the rest of analytics. |
Do not submit sensitive personal information in posts, AI prompts, screenshots, or voice recordings. FPL Analyzer does not need that information.
The app uses localStorage and sessionStorage for requested features, including preferences, theme/language, account session state, manager ID, cached FPL data, drafts, planner state, achievements, and chat history. These values remain in that browser unless a feature sends them as part of a request, you clear the site data, or the app removes them.
The essential fpl_analyzer_consent cookie records whether you selected essential storage only or allowed analytics, and the essential fpl_analyzer_replay cookie records whether you allow session replay. Google Analytics and PostHog cookies are created only after opt-in. Full names, purposes, durations, and preference controls are in the Cookie Policy. Choosing "Reject all" does not disable accounts or requested product features.
eu.i.posthog.com).These providers operate under their own terms and privacy notices. Information may be processed outside your country, including in the United States and other locations where a provider operates.
Where laws such as the UK GDPR or EU GDPR apply, the grounds relied on are: performance of the service you request (accounts, FPL analysis, AI, image and voice features); consent (optional analytics); legitimate interests (security, abuse prevention, fault diagnosis, and maintaining the Service); and compliance with legal obligations. You may withdraw analytics consent at any time through Cookie Settings without affecting earlier lawful processing, and session replay can be withdrawn on its own there while other analytics continue.
FPL Analyzer does not run behavioural advertising and does not intentionally sell personal information. It discloses information to the processors above to operate requested features, to authorities when legally required, or to protect users and the Service. Public posts and profiles are disclosed publicly by design.
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability, and to complain to your local data-protection authority. To exercise a right, email evgenimilushev3@gmail.com from the address associated with the account and provide enough detail to locate the record. Identity may need to be verified.
Important deletion detail. “Delete my account” in the app clears FPL Analyzer localStorage and sessionStorage in that browser and submits a best-effort deletion request to the legacy Google Apps Script account store. It cannot verify that every server-side copy or public post was deleted. For deletion from Supabase, compatibility records, analytics-linked data where identifiable, and public community content, email the address above. Some aggregate or legally required records may not be removable.
Reasonable technical and organisational measures are used, including transport encryption and password hashing in the current account system. No online service or storage system can guarantee absolute security. Keep passwords and authentication tokens confidential.
The Service is a general-audience football analytics product and is not directed to children under 13. A child under 13 must not create an account, post content, or submit personal information. Older minors should use the Service only with any consent required from a parent or guardian under local law.
This policy will be updated when the data flows or providers materially change. The review date at the top identifies the current version.