FPL Tips HQ is run by Jack Widnell, based in the United Kingdom. This explains what we do with your data. It is written to be read, not survived.

What we collect, and why

Your email address. Collected when you register. Used to identify your account, send your weekly briefing if you subscribe to HQ Pro, and contact you about the service. Lawful basis: contract — we cannot give you an account without it.

Your FPL team ID and the public data attached to it. When you connect your team we read data the Premier League already publishes: your team name, manager name, past season ranks, and — once a gameweek deadline has passed — your squad selections. We never ask for and never receive your FPL password. Lawful basis: contract.

Squad screenshots. If you upload one, the image is sent to Anthropic to extract the player names, then discarded. We do not store the image. We keep the list of players it contained. Lawful basis: contract.

Usage data. We keep a small set of first-party service counters needed to operate and evaluate limits. If you allow optional analytics, PostHog also receives five product milestones that tell us whether the squad-to-report journey works. We do not send screenshots, emails, FPL IDs, names, team details, grade letters, scores or recommendation contents. Lawful basis for optional PostHog analytics: consent.

Payment data. Handled entirely by Stripe. We never see or store your card details.

Feedback. We store the note you submit and, only if you choose to provide it, an email address for a reply. We also store only the broad product area you came from, such as HQ or a report — never a report, grade or league identifier. Feedback is not attached to your account. A one-way network fingerprint is kept to limit spam. Lawful basis: legitimate interests — improving and protecting the service.

League tables and other managers

We show mini-league standings. Those standings, and the squads behind them, are published by the Premier League through its public API once a gameweek deadline has passed. We do not obtain them from you or from anyone else privately.

We take two positions here that go further than the law requires:

1. Before a deadline passes, we never show one manager another manager’s squad. Pre-deadline selections are private and we treat them that way.
2. We only analyse another manager when a person specifically asks. We do not speculatively grade every manager in every league. Lawful basis: legitimate interests — a direct question from a member of that league, about data already public.

If you appear in a league table here and want to be removed, use the removal link on that page or email hello@fpltipshq.com with your FPL entry ID. We will suppress that entry for the season and remove its cached league standings and picks. If a link was shared before then, other services may hold a cached copy we cannot retract.

Connecting an FPL team uses its public entry ID. It confirms that the entry exists, but it is not proof that the account holder controls that FPL team. League access is limited to leagues the public FPL API reports for the connected entry, and rival picks are fetched only after the relevant gameweek deadline.

Who else processes your data

• Neon — database hosting
• Vercel — application hosting
• Anthropic — reads squad screenshots to extract player names; images are not retained
• Resend — sends email
• Stripe — processes payments
• PostHog EU Cloud — optional product analytics, only after you allow it

We do not sell your data. We do not share it for advertising.

How long we keep it

Your account data for as long as the account exists, and 30 days after you delete it. Screenshots are never stored. PostHog event data is retained for 14 days. First-party operational counters are retained for up to 24 months. Feedback expires after 364 days and an automatic hourly cleanup removes expired notes. Identifiable league standings and squad snapshots are retained only for the current and previous gameweek. Top-manager ownership is stored as an aggregate; its temporary manager-level capture is deleted after aggregation.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to processing based on legitimate interests, or ask us to stop emailing you. Email us and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

We use essential cookies to keep you signed in and enforce anonymous screenshot limits. PostHog is not loaded and its analytics storage is not created until you choose Allow. You can change that choice at any time using “Analytics choices” in the footer; withdrawing consent clears the analytics identity and stops future capture.