Privacy Policy

MPW Management Services Limited, trading as FPL Dugout, is responsible for the FPL Dugout service and for the personal information described in this policy.

Last updated: 13 August 2026

1. Information we collect

Account information

When you create an account we process your email address, an account/user identifier and authentication-related information (for example sign-in timestamps and session tokens). Authentication is handled by our managed backend provider; FPL Dugout does not store your password in plain text and does not have access to it.

Fantasy football information

You may import, create or maintain fantasy team information. Depending on the format and the features you use this can include:

• team or league identifiers (for example an FPL Team ID or a league ID)
• your squad or roster
• player selections, starting lineup and bench
• captain and vice-captain selections
• team value, budget and bank
• league settings and scoring rules
• player availability and manually confirmed availability information
• formation, squad-shape and other preferences
• other information needed to produce recommendations

Our Classic FPL, FPL Draft and Fantrax integrations are designed to be read-only.

FPL Dugout does not require users to provide their FPL, FPL Draft or Fantrax passwords and does not make transfers, waiver claims, trades or lineup changes on their behalf.

Recommendation and preference data

We store information needed to:

• personalise recommendations for your squad
• remember your scoring settings and league configuration
• remember squad and formation preferences
• remember player availability confirmations you make
• maintain recommendation and decision history so we can show what changed
• provide relevant alerts and analysis

Subscription information

If you buy a paid product we process your selected plan, subscription status, payment status, start and renewal or expiry dates, transaction identifiers and billing-provider (Stripe) customer and subscription identifiers.

Payment card details are entered directly into Stripe's payment interface and are processed by Stripe as the payment provider. FPL Dugout does not receive or store full payment card numbers.

Technical and usage information

Our hosting and infrastructure providers process technical information such as IP address, browser and device information, pages and features used, timestamps and diagnostic or error information. IP addresses can indicate approximate location. We also use cookies and browser local storage as described below.

Communications

If you email us, we process the content of your message and your contact details to answer your enquiry and to keep a record of support history.

2. How we use information, and our lawful bases

We use personal information to:

• create and manage your account
• import and display your fantasy teams
• provide personalised fantasy football recommendations
• remember your settings and preferences
• provide alerts, briefings and decision history
• administer paid subscriptions and reconcile payments
• provide customer support
• keep the service secure, available and working correctly
• diagnose errors and understand how features are used
• prevent abuse and fraud
• comply with legal and accounting obligations
• show advertising to free accounts, where permitted

Our lawful bases are: performance of a contract (providing the account, the service and paid plans); legitimate interests (securing the service, preventing abuse, diagnosing faults and improving the product); legal obligation (tax, accounting and responding to lawful requests); and consent (non-essential cookies and similar technologies, and any marketing email). Where we rely on consent you can withdraw it at any time; withdrawal does not affect processing carried out before withdrawal.

3. Third-party fantasy services

When you provide or connect a supported team or league identifier, you instruct FPL Dugout to retrieve the information needed to provide the requested analysis from that service.

FPL Dugout is an independent service and is not affiliated with, sponsored by or endorsed by the Premier League, Fantasy Premier League or Fantrax. Third-party names and trademarks remain the property of their respective owners.

These third-party APIs and services are operated independently of us. They may change, restrict access, alter their data structures or become unavailable, which can affect imports and refreshes.

4. Service providers and sharing

We share personal information with providers who help us run the service. Based on the current implementation these are:

• Application hosting and delivery: Lovable (Cloudflare edge infrastructure) — IP address, request and diagnostic logs
• Authentication, database and storage: Supabase (via Lovable Cloud) — Email address, account identifier, fantasy team data, preferences
• Payments and subscription billing: Stripe — Email address, customer and subscription identifiers, payment status
• Advertising (free accounts): Google AdSense — Cookie/device identifiers, IP address, approximate location
• Football and fantasy data: Sportmonks, Fantasy Premier League, FPL Draft, Fantrax — Team/league identifiers you provide; squad and league information

We may also share information with professional advisers (for example accountants or lawyers) and with authorities where we are legally required to do so.

FPL Dugout does not sell users' personal information.

5. Cookies, analytics and advertising

Strictly necessary technologies. We use cookies and browser local storage to keep you signed in, hold your session, and store settings such as squad preferences and confirmations you have made. These are required for the service to work.

Advertising. Free accounts may be shown advertising delivered by Google AdSense. Google may set cookies or read device identifiers to deliver and measure adverts. You can review Google's practices at policies.google.com/technologies/partner-sites.

Analytics. We do not currently operate a third-party analytics product on this site. If we introduce one, this policy and our consent controls will be updated first.

Consent management. We are currently implementing a consent-management tool that will let you accept, refuse and later change your choices for non-essential technologies such as advertising cookies. Until that control is live we are not claiming that it exists. If you would like advertising technologies restricted for your account in the meantime, or you want to exercise your rights, contact privacy@fpldugout.app. You can also control cookies through your browser settings.

Users with an active Pro or Season Pass entitlement are not shown FPL Dugout advertising while that entitlement is active. This removes our advertising, but does not remove the strictly necessary cookies and local storage the service needs to function.

6. International transfers

Some of our providers process information outside the United Kingdom. Where that happens, we rely on the transfer safeguards those providers put in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries covered by UK adequacy regulations. You can ask us for more detail about a specific provider.

7. Retention

• Account and fantasy data: kept while your account is active.
• After account deletion: account and fantasy data are deleted or anonymised, other than records we must keep for the reasons below.
• Transaction records: retained for the period required by UK tax and accounting law (currently six years plus the current financial year).
• Security and diagnostic logs: retained for a limited period by our hosting and backend providers.
• Backups: deleted data may persist in routine encrypted backups for a short period before being overwritten.

8. Your rights

Subject to the conditions in data-protection law, you may have the right to access your personal information, to have it corrected, to have it deleted, to restrict or object to certain processing, to data portability where applicable, and to withdraw consent where we rely on it. These rights do not apply unconditionally in every situation — for example, we may need to keep transaction records to meet legal obligations.

To make a request, email privacy@fpldugout.app. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Email communications

We currently send only essential account and service emails — for example sign-in, verification, password reset and billing messages related to your account. We do not operate a marketing email programme at present. If we introduce marketing emails, we will rely on your consent or the applicable soft opt-in, include an unsubscribe link in every marketing message, and keep marketing separate from essential service emails, which you cannot unsubscribe from while you hold an account.

10. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections, access controls on our backend, database row-level security and restricted administrative access. No online service can be guaranteed to be completely secure. You are responsible for keeping your own account credentials confidential and for the security of the device and email account you use to sign in.

11. Children

FPL Dugout is designed for people managing their own fantasy football teams and is not directed at young children. We do not knowingly collect personal information from young children. If you believe a child has provided personal information to us, contact privacy@fpldugout.app and we will investigate and delete it where appropriate.

12. Changes to this policy

We may update this policy as the service develops. The "last updated" date above will change and, where a change materially affects how we use your personal information, we will take reasonable steps to tell you.

13. Contact

Privacy enquiries: privacy@fpldugout.app. General support: support@fpldugout.app. See our Contact page and Terms of Service.