Last updated 27 September 2026
Privacy & cookies
FPL Deck is an unofficial Fantasy Premier League companion, run by an individual as a personal, non-commercial project. This page explains what information we use, why, and the choices you have, written under UK data protection law.
The short version: we don’t sell your personal information, and analytics cookies are entirely optional — nothing is switched on until you say yes.
Who’s responsible for your data
FPL Deck is run by an individual, contactable at contact@fpldeck.com. That’s who to reach for any privacy question, correction, or deletion request.
Information we use
- Fantasy football data — publicly available manager names, team names, scores, ranks and league activity, sourced from the official FPL API.
- Your choices on this device — if you enter a manager ID or select “Playing as,” we remember that choice locally so the site is personalised for you.
- Account details — if you sign in, your email address and sign-in details are handled by Clerk, our authentication provider, along with which manager/team you’ve linked to your account.
- Onboarding details — the nickname you choose, and your marketing preference, if you set one.
- Reactions — if you react to a competition’s gameweek report, which reaction, to which moment, when, and which account made it. Only people on that competition’s roster can see it, shown under your nickname.
- Basic technical data — our hosting and database providers (Vercel, Turso) automatically log things like IP address, browser type and request times, purely to keep the service running securely and reliably.
We collect this either because it’s necessary to provide the service you’re using (contract or legitimate interest), or to keep the site secure (legitimate interest). Cookies used for analytics or advertising are only ever set with your consent, where consent is required.
Cookies
We use two kinds of cookies:
- Essential cookies — keep you signed in and remember your access and preferences. These can’t be switched off, as the site won’t work properly without them.
- Optional cookies — Microsoft Clarity and Google Analytics, used only if you accept them, to help us understand how the site is used.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| fpldeck_manager, fpldeck_competition | Essential | When you’re not signed in, remembers the manager ID used for your personalised tools and the competition you’ve chosen to follow. Signed in, the competition you follow is saved with your account instead. | 2 weeks |
| fpldeck_cookie_consent | Essential | Remembers your cookie consent choice. | 1 year |
| __session, __client_uat and their suffixed variants | Essential | Set by Clerk, our authentication provider, to keep you signed in and to record whether an account is signed in on this device. Sign-in cannot work without them. | Your session, up to 7 days; the signed-in marker persists longer and is cleared when you sign out |
| __clerk_handshake, __clerk_redirect_count | Essential | Set by Clerk for a moment while it re-establishes your session, then discarded. | Seconds |
| __client, __cf_bm, _cfuvid | Essential | Set on clerk.fpldeck.com by Clerk and its CDN (Cloudflare) to hold sign-in state and protect the sign-in endpoint from automated abuse. See Clerk’s privacy notice for details. | Up to 7 days |
| _clck, _clsk, CLID, ANONCHK, MR, MUID, SM | Optional | Set by Microsoft Clarity, only after consent, for usage insights. See Microsoft’s Clarity documentation for details. | Up to 1 year |
| _ga, _ga_*, _gid | Optional | Set by Google Analytics, only after consent, for usage insights. See Google’s cookie documentation for details. | Up to 2 years |
You can withdraw consent for optional cookies any time below, or clear cookies via your browser. Doing either removes remembered choices, and you’ll be asked again next visit.
Manage cookie preferences
How your information is used
- To run the core features: sign-in, league tables, profiles, awards, and your personalised views.
- To keep the service secure and diagnose faults.
- If you’ve consented, Microsoft Clarity and Google Analytics process usage data — pages visited, clicks, scroll behaviour, and approximate location from IP address — to help us improve the site. They act as our data processors; see Microsoft’s privacy statement and Google’s privacy policy.
We do not sell your personal information to third parties.
Advertising
FPL Deck does not currently show ads. If that changes, this policy will be updated first, and this section will explain what’s used and why. If an ad provider relies on cookies, tracking, or personalised targeting, that will be added to the cookie consent choice above — nothing will be shown or tracked for advertising purposes without being disclosed here and, where required by law, without your consent.
Where your data is processed
Our providers may store or process data outside the UK, under appropriate legal safeguards (such as the UK’s International Data Transfer Addendum or equivalent contractual clauses):
- Vercel (hosting) and Turso/LibSQL (database)
- Clerk (account sign-in, if you create an account)
- Microsoft Clarity and Google Analytics (only with consent)
How long we keep it
- Account, manager and preference data: kept until you delete your account or ask us to remove it.
- Reactions in competitions: kept until you remove them or delete your account.
- Security and access logs: kept only as long as needed for security purposes, then deleted.
- Season/league history: kept for as long as it’s useful for that purpose, or as required by law.
Your rights
You have the right to:
- Access the data we hold about you
- Correct it if it’s wrong
- Delete it — including your Clerk account and everything linked to it
- Restrict or object to certain processing
- Port your data elsewhere, where applicable
To exercise any of these, email contact@fpldeck.com. If you’re unhappy with how we’ve handled your data, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Children
FPL Deck isn’t directed at children, and we don’t knowingly collect data from anyone under 13.
Changes to this notice
If we make a material change — for example, using a new provider, introducing ads, or changing what data we collect — we’ll update the date at the top of this page, show a notice on the site, and email account holders directly. Minor wording or clarity fixes won’t trigger a fresh notice.