Privacy Policy

Last updated: 24 September 2026

PLFantasyTool is a Fantasy Premier League analytics tool run by one person. This page explains exactly what data the site collects, why, who else processes it, how long it is kept, and what you can ask me to do with it. It is written to be read rather than to cover every eventuality, so if something here is unclear, email me and I will answer.

Who is responsible

PLFantasyTool (plfantasytool.com) is the data controller for the data described here. Contact: [email protected].

What is collected

Data	When	Why
Email address, name and profile picture from your Google account	When you sign in	To create and identify your account
Your Google account identifier	When you sign in	To link your sign-ins to the same account
Subscription status and a Stripe customer reference	If you subscribe	To know whether your account has premium access
Squads and transfer plans you save in the Multi-GW Planner	If you save a plan	So your plans are there when you come back
Anonymous usage statistics (pages viewed, approximate country, device type)	On every visit	To understand which parts of the site are used

What is never collected

Your card details never reach this site. Payments are handled entirely by Stripe, and I only ever see whether a subscription is active.

Your Fantasy Premier League login is never requested. Loading a squad uses only your public FPL Team ID, which is the number in the URL of your own FPL page. Nothing on this site can act on your FPL account.

Legal basis

Account data and saved plans are processed to provide the service you asked for, which is the performance of a contract. Payment records are kept to meet accounting obligations. Usage statistics are processed on the basis of legitimate interest in understanding how the site is used, and are not used to build profiles of individuals or to advertise to you.

Who else processes your data

Running a site of this kind means using a small number of third parties. Each has its own privacy policy, and each only receives what it needs.

Provider	Purpose	What it receives
Google	Sign-in and site analytics	Your Google profile basics, and anonymous usage data
Stripe	Payments and subscriptions	Your email and payment details, which you give to Stripe directly
Hetzner	Server hosting, in Germany	Everything stored by the site, at rest
Cloudflare	DNS and traffic delivery	Connection data such as your IP address

Your data is stored on servers in Germany. Some of the providers above are based in the United States and may process data there under the transfer safeguards their own terms set out.

Cookies

The site sets a cookie to keep you signed in. That one is necessary for the site to work at all. Google Analytics sets cookies to count visits and see which pages are used. You can block or delete cookies in your browser; blocking the sign-in cookie will mean you cannot stay logged in.

How long data is kept

Account data and saved plans are kept while your account exists, and deleted when you ask me to delete the account. Payment records are kept for as long as accounting rules require. Analytics data is kept according to Google Analytics retention settings, and is not linked to your account.

Your rights

Under the GDPR you can ask for a copy of the data held about you, ask for it to be corrected, ask for it to be deleted, ask for it in a portable format, object to processing based on legitimate interest, or ask that processing be restricted.

Email [email protected] and I will action it. There is no form and no ticket system. If you are not satisfied with how I handle it, you can complain to your national data protection authority. In Denmark that is Datatilsynet.

Children

This site is not aimed at children. If you are under 18, please do not subscribe without the permission of a parent or guardian.

Changes

If this policy changes in a way that affects you, the date at the top will change and the change will be described here. Continuing to use the site after a change means the updated policy applies.