Privacy policy

1. Who is responsible?

FMC is a personal project operated by Jesper Savborg and Cwa Rugumayo in Sweden. We jointly decide how and why personal data is used and are joint controllers.

Contact both operators about privacy, account deletion or your rights at fantasymatchcall@gmail.com. Either operator can receive your request; we coordinate responses and remain responsible for our respective obligations. You may exercise your rights against either of us.

2. What data we use

• Account information: your email address, account identifier and sign-in information. If you choose Google sign-in, Google supplies basic profile information such as your name and profile picture. We do not receive your Google password or access to your Gmail messages.
• Game information: predictions, Banker selection, submissions, results, points, group membership and preferences, including email preferences.
• FPL information: team and manager identifiers, names, league memberships, game history, picks and scores obtained from public Fantasy Premier League data when a team or league is requested. This may include other managers in the requested league. Public availability does not make identifiable information non-personal.
• Technical information: requests, IP addresses, browser/device information, timestamps, errors and security logs processed by our hosting and authentication services. We also use website usage statistics as described below.
• Messages: information you send to our support email, including information needed to respond to a privacy request.

You can look up public FPL information without an FMC account. An email address and authentication are needed to save account-linked information, submit Weekly Seven entries and use groups. Without them, those features are unavailable.

3. Why we use data

• Provide the features you request: authenticate you, save entries and preferences, calculate results, run groups and provide requested service messages. Our legal basis is performance of our agreement with you to provide these features.
• Provide public FPL comparisons: retrieve and calculate public sporting game information. We rely on our legitimate interest in providing the comparison tool, taking account of managers’ privacy and using the information for that limited purpose.
• Keep FMC secure and working: prevent abuse, enforce deadlines, diagnose errors and understand usage to improve the service. We rely on our legitimate interests in operating a reliable, secure service. Where consent is legally required for optional processing, it must be obtained before that processing.
• Handle requests and legal duties: respond to questions, facilitate data protection rights and comply with applicable legal obligations. We rely on legitimate interests for ordinary support and legal obligations where applicable.

Game scoring and xFPL calculations are automated, but are not used to make decisions with legal or similarly significant effects on you. We do not sell your personal data or use it for targeted advertising.

4. What other people can see

Group members can see the member identities and standings needed for their group. Public results can include display names and scores. Your account email is not displayed to other players, and public sharing does not expose pre-deadline Weekly Seven predictions.

When you create a share link, the snapshot is accessible to anyone who has the link, including people they forward it to. An xFPL snapshot can contain team names and comparison scores; a Weekly Seven snapshot contains settled results. Contact us if you want a share removed. Copies or screenshots made by others may remain outside our control.

5. Service providers and international processing

We use Supabase for accounts, authentication and database storage; Vercel for hosting, delivery, diagnostics and website analytics; and Google for optional Google sign-in, hosted fonts and our Gmail support inbox. Sign-in codes and service emails are also handled by the email delivery providers configured for those services. Providers receive the data needed for their role. Google also processes information under its own privacy terms when you use Google services.

Our application database is hosted in Ireland. Website hosting, support and our providers’ operations may process data outside the EU/EEA, including in the United States. An EU database location does not mean that all processing stays in the EU.

International transfers must have an applicable safeguard, such as an adequacy decision or the European Commission’s Standard Contractual Clauses. The providers describe their arrangements in the Supabase data processing addendum, Vercel data processing addendum and Google privacy policy. Contact us for information about the safeguards applicable to your data or to request a copy where available.

We may disclose information where necessary to meet a legal obligation or protect the service and users’ rights.

6. Cookies, browser storage and analytics

Authentication uses cookies to keep you signed in. Local and session storage remember your draft predictions, selected FPL team or league, and progress through sign-in. You can clear this information in your browser; doing so may sign you out or remove unsaved drafts. Clearing browser storage does not delete information already saved to your account.

FMC includes Vercel Web Analytics to understand visits and usage, such as pages viewed, referral sources and browser/device categories. Vercel describes this analytics service as using request-derived identifiers rather than third-party tracking cookies. Feature interaction events may also be collected when enabled. We do not intentionally include email addresses, prediction answers or FPL identifiers in custom analytics events. See Vercel’s analytics privacy information.

Fonts are loaded from Google Fonts, which receives your IP address and browser request information when your browser requests them. FMC does not currently include advertising trackers.

7. How long we keep data

We keep account information, preferences and game history while needed to provide your account, ongoing groups and seasonal results. We review accounts after 24 months of inactivity to decide whether their personal data should be deleted or anonymised, taking account of ongoing groups and seasonal results. This is a retention review, not a promise of automatic deletion at exactly 24 months. Public FPL caches are refreshed or replaced as calculations require; shared snapshots remain available until removed. We assess retention against the purpose of the record, whether your account and groups remain in use, and whether a legal obligation or dispute requires continued storage.

You can request account deletion at our contact email. We will delete or anonymise personal data that is no longer needed, subject to applicable exceptions, and explain any information we must retain. Historical rankings may need adjustment. Technical logs and backups follow the applicable providers’ retention cycles; deleted information can remain in restricted backups until those copies expire. Information kept solely for recovery is not used for ordinary service operation.

8. Your choices and rights

Depending on the legal basis and circumstances, you can request access, correction, deletion, restriction or portability of your personal data. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Optional email preferences can be changed in your account.

Email fantasymatchcall@gmail.com to make a request, including requests about public FPL information. We may ask for proportionate information to verify that the data relates to you. We normally respond within one month; if a lawful extension is needed, we will explain it within that month.

You can complain to Integritetsskyddsmyndigheten (IMY), Sweden’s data protection authority, or the supervisory authority where you live or work in the EU/EEA. You do not have to contact us first.

9. Changes to this notice

We will update the date above when this notice changes and bring material changes to your attention as appropriate. If FMC later moves to a company, we will explain the new operator and any relevant changes to the use of existing data.