Privacy Policy

Last updated 13 October 2026.

Ali Kara, an individual based in Canada, runs FPLWise and is responsible for your personal data. Privacy contact: support@fplwise.com.

What we collect

We keep only what the service needs to work:

• your email address and an internal account ID
• single-use sign-in links, stored in hashed form
• session and access tokens, stored in hashed form
• the dates your access was granted
• payment references and referral or creator attribution
• simple usage counters that limit how often the service is used

Sessions use essential, secure cookies.

When you calculate a plan, we use your FPL team ID or the squad you enter. Planner jobs and cached inputs expire automatically. A squad saved in the squad builder stays in your browser until you clear it there.

We never ask for your Fantasy Premier League password, and we do not collect your birth date or any identity document.

We do not sell your personal data.

Age

The free service is for people aged 13 and over, and paid plans are for people aged 18 and over. When you sign up, you confirm that you meet the free-service age, and you confirm the paid-plan age again before you pay. We do not run ads or behavioural profiling.

Why we use it, and our legal basis

If you are in the UK or the European Union, these are the legal bases we rely on:

• Contract: signing you in, giving you access to what you have signed up or paid for, and billing and refunds.
• Legitimate interests: keeping the service secure, preventing abuse, applying rate limits, and counting aggregate usage so we can run and improve the service. We balance this against your rights, and you can object by contacting support@fplwise.com.
• Consent: marketing email, only if we ever offer it and only if you opt in. You can withdraw consent at any time. We do not send marketing email today.
• Legal obligation: keeping billing and tax records for the period the law requires.

Using FPLWise through ChatGPT

You can use FPLWise through ChatGPT. We then receive the tool requests ChatGPT makes and the inputs to them, such as an FPL team ID. If you link your FPLWise account, we also receive an access token that identifies your account to us. We do not ask OpenAI for your email address or profile, and we do not receive your conversation. What you share with ChatGPT is covered by OpenAI's privacy policy, not this one. Access tokens last 15 minutes and are renewed with a refresh token that lasts up to 90 days. You can revoke connections from your account at any time.

Who processes your data

• Resend sends our sign-in and renewal-reminder emails.
• Cloudflare carries traffic to our server through a secure tunnel, caches and delivers the site through its network, and hosts parts of the site on Cloudflare Pages. To do this it processes IP addresses and request logs, and uses them to protect the site.
• Stripe (Managed Payments) takes payment. Link, LLC is the merchant of record that sells to you, and it handles billing, tax and related records. They keep your payment details; we do not see your card number.
• Our own server runs the service. It is self-hosted on a server in Canada.

Where your data is processed

Our servers are in Canada. If you live in the UK or the European Union, your data is therefore processed in Canada, outside the UK and the EU. Both the UK and the EU recognise Canada as providing adequate protection for commercial organisations covered by PIPEDA, Canada's federal private-sector privacy law, which applies to personal information that crosses borders in the course of commercial activity. We are in Alberta, so Alberta's Personal Information Protection Act also applies to us. We rely on this adequacy recognition for transfers to Canada. Our providers have their own transfer arrangements, described in their policies.

How long we keep it

Sign-in links expire after 15 minutes. Website sessions expire after 30 days. Rate-limit counters reset at the end of their window. Expired records are removed when they are next used.

If you delete your account, we delete your account data 30 days later. Billing records are kept for the period the law requires, mostly by Link, LLC.

Your choices and rights

You can sign out, revoke an app connection or access token from your account, and clear squad data stored in your browser. You have the right to ask for access to your data, correction, deletion, a copy, and to object to or restrict some uses. Contact support@fplwise.com and we will answer within one month. We do not send marketing email or publish testimonials without your separate consent.

Complaints

Please contact us first so we can put things right. You also have the right to complain to a regulator:

• in the UK, the Information Commissioner's Office (ICO)
• in the EU, the data protection authority in the country where you live or work
• in Canada, the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta