FPL Cat
Get Pro

Privacy and cookies

Last updated 1 October 2026.

FPL Cat (fplcat.com) is run by Pawel Miech Software Development, a business registered in Poland(tax ID PL5472029597). We're the controller of your personal data under the EU General Data Protection Regulation (GDPR) and, for visitors in the UK, the UK GDPR. Questions or requests: [email protected].

FPL Cat is an independent fan site, not affiliated with the Premier League, Fantasy Premier League, any club or player (see the terms). This policy covers our own handling of your data; your FPL account is governed by Fantasy Premier League's own privacy policy.

Short version: you can use almost all of FPL Cat without an account. We collect as little as we can, never sell it, and only use analytics cookies if you say yes.

What we collect and why

  • Your Google account, if you sign in: name, email address and profile picture, to give you an account (following managers, the AI assistant, Pro). Lawful basis: providing the service you asked for (contract).
  • Sign-in sessions: a session cookie, plus the IP address and browser of each session, to keep you signed in and protect accounts from misuse. Basis: contract and our legitimate interest in security.
  • Your FPL team ID, if you enter it (Rate My Team, bonus points), remembered in a cookie and, if you're signed in, on your account, plus the managers you follow. We look up your team on the public FPL website. Basis: contract.
  • Pro purchases: which plan you have, its dates and status, and a Stripe customer reference. Card details go straight to Stripe and Link; we never see or store them. Basis: contract and legal obligations (records).
  • The AI assistant (Pro): your questions and your squad are sent to our AI provider to answer them. We don't keep the conversation; we only record how many messages you send and what each one cost us (no content), to enforce the daily and monthly limits. Your assistant settings (its personality, tip style, players and clubs you won't own, favourite players) are kept with your account until you change them or delete your account. Basis: contract.
  • Analytics and session replay, only if you accept cookies: pages viewed, clicks, device and browser type, rough location from your IP address, and recordings of how the page was used (form inputs are masked). We use this to find bugs and improve the site. Basis: your consent, which you can withdraw any time.
  • Anonymous visit counts if you don't accept: without cookies or any storage on your device, we count page views using a short-lived, non-reversible identifier our analytics provider derives from your IP address and browser. Basis: our legitimate interest in knowing how the site is used.
  • Emails about next season's pass, only if you tick the box: we keep your email address, the wording you agreed to and when, and email you when the next season's pass goes on sale. Basis: your consent; turn it off any time on the Pro page or with the unsubscribe link in any email. Receipts and account emails about purchases come from Link and aren't affected.
  • Account events: when you're signed in, our server records key events (signing in, following a manager, Pro purchases, renewals and cancellations, including any reason you give when cancelling) in our analytics tool, linked to your account, to run Pro and understand what works. Basis: legitimate interest. This doesn't use cookies.
  • Server logs: IP addresses and requests, kept briefly to run and secure the site. Basis: legitimate interest.

Who we share it with

We don't sell your data. We use these services to run FPL Cat, each only for its job:

  • Google: signing in.
  • Stripe and Link (Stripe's Managed Payments): payments, receipts, tax and payment support. For payments, Link is the merchant of record and handles your payment data under its own privacy policy.
  • Analytics and session replay providers: usage statistics, and replays if you accept cookies.
  • AI model providers: answering your questions in the AI assistant.
  • Hosting and network providers: running our server and delivering the site securely.

If you'd like to know exactly which providers we use, email [email protected]. Some of them are outside the European Economic Area and the UK (mainly the United States). Where they are, transfers are covered by adequacy decisions (the EU-US Data Privacy Framework and its UK extension) or standard contractual clauses.

How long we keep it

  • Your account and its data: until you ask us to delete it.
  • Sign-in sessions: until they expire or you sign out.
  • Purchase records: five years from the end of the tax year, as Polish tax rules require.
  • Analytics and replays: up to a year, replays usually much less.

Cookies

  • Always on (strictly necessary): your sign-in session; fplcat_team, the FPL team ID you entered (a year); fplcat_consent, your answer to the cookie banner (a year); your AI assistant conversation, in your browser's tab storage (fplcat_chat_…) so it survives a reload, deleted when you close the tab. Stripe sets its own cookies on its checkout pages to prevent fraud.
  • Only if you accept: our analytics provider's cookie and local storage (ph_…), for analytics and session replay.

You can change your choice any time: .

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or have it in a portable format, and withdraw consent (for cookies: Cookie settings). Email [email protected]; we'll answer within a month. If you're unhappy with how we handle your data, you can complain to our supervisory authority, the Polish President of the Personal Data Protection Office (uodo.gov.pl), to the data protection authority where you live, or in the UK to the Information Commissioner's Office (ico.org.uk).

Children

FPL Cat isn't aimed at children under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date above, and tell signed-in users about anything significant. See also our terms.