The short version

We ask for an email address and a password so you can sign in, a mobile number to check you are a real person, and a name for you and your team so other managers can see who they are playing. Everything else we hold is the game itself — your squad, your transfers, your points.

We do not sell your data, and we never will. There is no advertising inside the game. Your number is used to send you a verification code and, if you ask for them, deadline reminders — nothing else.

What we collect, and why

Your email address and password. These are your way in. The password is stored scrambled, by our login provider, in a form nobody — including us — can read back. Your email is also where a password-reset link goes if you ask for one.
Your mobile number. Collected once, and a code is texted to it to check the number is really yours. It is a check that you are a real person, not a second password, and we do not sign you in with it.
Your manager name and team name. You choose both. They are shown to other managers in any league you join and in the Overall table, so pick accordingly.
Your game data. The squad you pick each gameweek, your transfers, the chips you play, your points and your league memberships. A settled gameweek keeps its picks forever, because that is what makes an old scoreline still true.
Notification permissions. If you turn on deadline reminders your browser gives us an anonymous address for that one device. It identifies a browser, not a person, and switching notifications off deletes it.
Basic usage data. Which screens get used and where the game breaks. Nothing is stored on your device for advertising unless you tap Allow on the cookie bar — decline it, or ignore it, and the site runs entirely without cookies. Signing in does keep a token on your device — that is what stops the game asking for your password on every screen.

Who else sees it

A short list of companies run parts of the game for us. They may only use what we send them to do the job we hired them for.

Supabase — stores your account and your squad.
Twilio — sends your verification code, and so receives your number.
Cloudflare — serves the site and the game to your device.
PostHog — usage analytics, hosted in the United States. It runs without cookies unless you accept them on the cookie bar, and anything you type is masked before it is recorded.
Meta — if you arrived from one of our adverts, Meta is told that someone who clicked the advert signed up. That is how we find out which adverts work. If you accept cookies, a Meta cookie also lets an advert you tapped earlier get the credit when you come back days later.

We will also hand over data if the law genuinely requires it. Nobody else gets it.

Where it lives, and for how long

The game is built by one person and runs on services based in the United States and the European Union, so your data crosses a border on its way to us. Our providers carry the standard contractual protections that are designed for exactly that.

We keep your account for as long as you have one. Ask us to delete it and we will, along with your squads and your league memberships — bear in mind that removes you from past tables too, and we cannot put it back.

Your choices

If you are in the UK or the European Union the law gives you a set of rights over your data, and we will honour them wherever you live rather than keeping two standards. You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to a particular use.

The quickest routes need no message to us at all: change your manager or team name in the app, and turn deadline reminders off in your device settings. For anything else, write to us.

If you think we have handled your data badly, tell us first — but you are entitled to complain to your national data protection regulator, which in the UK is the Information Commissioner's Office and in Ireland is the Data Protection Commission.

Adverts and measurement

We advertise the game on Facebook and Instagram. When an advert brings someone here, Meta is told that a visit and, later, a sign-up happened, so that we can tell a good advert from a wasted one. This tells Meta about an event, not about your squad.

We do not currently upload contact details to any advertising platform to build audiences. If that ever changes, this page changes first, and in the UK and the European Union it would happen only with your consent.

Age

You need to be 16 or over to have an account. We do not knowingly keep data about anyone younger; if you believe a child has signed up, tell us and we will remove the account.

Changes, and how to reach us

When we change how any of this works we will change this page, and the date at the top of it, at the same time. The game is in its first season and it will grow — so this page will too.

Questions, requests, or something that looks wrong: privacy@fantasyfootballeurope.com. A real person reads it.

Privacy policy