Privacy policy

Your account. Your email address and password. Your password is stored by our authentication provider in a form nobody can read back — including us.

Your profile. The name you choose to show, your Fantasy Premier League team ID if you link one, and a profile photo if you upload one.

Your leagues. Which leagues you’re in, and what happens in them: scores, wooden spoons, entry fees and who owes what, accas and the legs you pick, prize votes, and settings an admin changes.

League chat. The messages you send in a league’s chat, anyone you block, and any message you report.

How you use the app. When you’re signed in: the pages you open, how long each is on screen, things you do (such as creating a league or submitting a leg), and whether you’re using the iOS app or a browser. When you’re signed out, we record only that a page was viewed, with nothing that identifies you.

Whether you’re 18 or over. We ask for your date of birth once, because the group acca is for adults. We don’t keep the date. If you’re 18 or over we keep only the fact that you confirmed it; if you’re under 18 we keep only the date you’ll turn 18, so the acca unlocks by itself on your birthday.

Your device, if you allow notifications. An address for your device at Apple (the iOS app) or at your browser’s push service (LeagueMate on your home screen, or a browser), so we can send you notifications — and which kinds you’ve chosen to get: chat messages, leg reminders, the wooden spoon and acca results.

Technical information. Like any website, our servers see your IP address when you use the app. We use it only to keep the service running and to stop abuse, such as too many requests in a short time. It isn’t part of our analytics, and the short-lived records that use it are deleted within two days.

When something goes wrong. If the app hits an error, we record what went wrong and on which page, so we can fix it. Not who you are, and not your IP address.

To run the app for you — your account, your leagues, reminders you ask for. We rely on this being necessary to provide the service you signed up for.

To understand how the app is used and improve it — our own usage measurements. We rely on our legitimate interest in knowing what works. You can object to this; see “Your rights”.

To keep the service safe — rate limiting, preventing misuse, and keeping records we may need to deal with a problem. Also a legitimate interest.

Notifications — only if you’ve allowed them on your device. You can choose which kinds you get, or turn them off, on the Account page or in your phone’s settings.

Your league. Members of a league see your display name and photo, your scores, what you owe, and your accas and votes in that league, and what you say in its chat. League admins can also edit the league’s records, such as marking an entry fee paid, and delete chat messages.

Us. The operator of LeagueMate can see usage information linked to accounts, to understand how the app is used and to help when something goes wrong. We read a chat message only if someone reports it, to decide whether to remove it. Nobody is told who reported them or who has blocked them.

Companies that run parts of the service for us, only as far as they need to:

• Supabase — our database, sign-in and photo storage
• Vercel — hosting the app
• GitHub — keeping encrypted nightly backups of our database, in case we need to restore it
• Apple — delivering notifications to iPhones
• Your browser’s push service (Apple, Google, Mozilla or Microsoft, depending on the browser) — delivering notifications to LeagueMate on your home screen or in a browser. Those are encrypted so the service can’t read them
• Our email delivery provider — sending sign-up and password-reset emails

We don’t sell your data, share it with advertisers, or use third-party analytics or advertising trackers.

Fantasy Premier League. If you link your FPL team, we read the public information about that team from the Fantasy Premier League website. We don’t send them anything about you. LeagueMate isn’t connected to or endorsed by the Premier League.

Some of these companies are based in, or process data in, the United States. Where your data leaves the UK, it’s protected by the safeguards UK data protection law requires.

• Your account and profile: until you delete your account.
• Usage measurements: one year, then deleted automatically.
• Error records: 30 days.
• Records that use your IP address to stop abuse: up to two days.
• Notification tokens: until you delete your account or the token stops working.
• Your age confirmation: until you delete your account.
• Chat messages: until you or a league admin deletes them, or you delete your account. Deleting a message removes what it said for everyone.
• League records: for as long as the league exists. If you delete your account, your part in them stays so the league’s totals still add up — but it shows as “Former member”, with your name, email and photo removed.

Deleted data can survive in backups for up to 30 days before they’re deleted in turn.

We don’t use advertising or tracking cookies, so we don’t ask you to accept any. We store only what the app needs to work or what you’ve chosen:

• Sign-in cookies, which keep you signed in
• A cookie remembering which of your leagues you’re looking at
• Your odds-format preference
• A note that the app’s intro has been shown, cleared when you close it
• When you closed the tip about adding LeagueMate to your home screen, so it stays closed

You can:

• Delete your account yourself, any time, from the Account page
• Ask for a copy of what we hold about you
• Ask us to correct something that’s wrong
• Object to our usage measurements, or ask us to limit what we do with your data
• Ask for your data in a form you can take elsewhere

Email noah@noahshort.me from the address you signed up with. We’ll reply within a month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put it right first.

LeagueMate is for people aged 13 and over. We don’t knowingly keep data about anyone younger — if someone under 13 tells us their date of birth, we don’t store anything about it — and if you think we have, tell us and we’ll delete it.

If you’re under 18, the group acca stays locked until your 18th birthday, you won’t get acca reminders, and how you use the app isn’t linked to your account in our own usage measurements.

If we change how we use your data in a way that matters, we’ll tell you in the app before it takes effect. The date at the top shows when this was last changed.