Privacy Policy
Last updated 8 August 2026
This policy explains what [YOUR REGISTERED ENTITY NAME] (ABN [ABN]) collects when you use fplshark.com, why, and what you can do about it. We are the data controller.
What we collect
Account information
- Your email address and password (passwords are hashed — we never see them).
- A display name, if you set one.
- If you sign in with Google: your email address and name from your Google profile.
Fantasy football data
- The FPL team IDs and league IDs you choose to connect.
- Public information the Fantasy Premier League API returns for those IDs — team name, manager name, squad, points, transfers, league standings.
This information is already public on the Premier League's own site for anyone with your team ID. We fetch it; we never send your personal details to them.
Payment information
Payments are handled by Stripe. We receive your subscription status, billing period and the last four digits of your card — never the full number. Stripe's handling of your data is covered by their privacy policy.
Analytics
We use Google Tag Manager and Google Analytics to understand how the site is used — pages viewed, rough location, device and browser. If you're in the UK, EU/EEA or Switzerland, none of this loads until you accept the cookie banner, and declining blocks it entirely. Elsewhere it loads by default; you can block it with your browser or an ad blocker.
Why we use it
- To run the service — you can't have an account without an email address, or see your team without its ID.
- To take payment — for memberships, under our contract with you.
- To improve the product — aggregate analytics, with consent where required.
- To contact you — service messages such as payment failures or material changes.
Where UK/EU law applies, our lawful bases are performance of a contract (account and billing), consent (analytics cookies), and legitimate interests (keeping the service secure and working).
Who we share it with
We don't sell your data. We share it only with providers who run the service for us:
- Supabase — database and authentication (hosted in Tokyo, Japan).
- Vercel — application hosting and content delivery.
- Stripe — payment processing.
- Google — analytics, and sign-in if you use it.
These providers operate internationally, so your data may be processed outside your country, including in the United States, Japan and Australia.
How long we keep it
- Account and fantasy data: while your account is open, and for 30 days after you delete it.
- Billing records: seven years, as tax law requires.
- Analytics: as configured in Google Analytics, currently 14 months.
Your rights
You can ask us to:
- Give you a copy of the data we hold about you.
- Correct anything that's wrong.
- Delete your account and data.
- Stop using your data for a particular purpose, or withdraw consent for analytics.
Email contactFPLShark@gmail.com and we'll respond within 30 days. If you're in the UK or EU you can also complain to your data protection authority; in Australia, to the OAIC.
Cookies
- Essential — keep you signed in and remember your cookie choice. These can't be turned off without breaking the site.
- Analytics — Google Analytics. Optional, and consent-gated in the UK, EU/EEA and Switzerland.
To change your choice, clear this site's data in your browser and reload.
Security
Data is encrypted in transit (HTTPS) and at rest by our providers. Access to production data is limited. No system is perfectly secure, but if a breach affects you we'll tell you and the relevant regulator as the law requires.
Children
FPL Shark isn't intended for under-16s. If you believe a child has given us personal information, email us and we'll delete it.
Changes
We'll post any changes here and update the date above. Material changes will be emailed to you.