Privacy Policy

This Privacy Policy explains how FPLRogue (“FPLRogue”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you use the FPLRogue mobile application (the “App”), our website at fplrogue.com (the “Site”) and our related services (together, the “Service”).

We are the data controller for the personal data described in this policy. FPLRogue is operated from the United Kingdom, and we process personal data in accordance with the UK GDPR and the Data Protection Act 2018. If you have any questions, contact us at support@fplrogue.com.

FPLRogue is an independent analytics tool. We are not affiliated with, endorsed by, or connected to the Premier League, the Football Association, or the official Fantasy Premier League (“FPL”) game.

1. Information we collect

Information you give us

• Email address — when you join our launch waitlist, request founder pricing or create an account.
• Waitlist consent record — when you join the waitlist, we record the consent wording shown to you, the consent version, the signup source and the time of signup so we can evidence your request and honour any founder pricing offer.
• Your FPL details — if you link your team, we use your FPL Team ID to retrieve information about your squad, transfers, points and league standings from the official FPL service. If you choose to sign in to FPL through the Android App, your FPL email, password and session tokens are encrypted on your device and sent directly to the official FPL service. They are never sent to or stored on FPLRogue servers, and are removed from the device when you disconnect your FPL account.
• Support and feedback — the category and message you submit in the App, together with your account, app version, app build, device platform and operating system version so we can respond to feedback, investigate bugs and assess feature requests. Please do not include passwords or FPL login details.
• Golden Trophy game — the public display name you choose, your draft choices and season results. No account or email address is required to play. Display names and leaderboard results are public.
• Lovable Rogues Monthly Challenge — your account and linked-team identifiers, registration and link timestamps, subscription status at the entry cutoff, official monthly score and rank, eligibility checks, prize choice and fulfilment record. If you voluntarily take part in winner content, we also use the comments and profile details you agree to provide.

Information we collect automatically

• Device & usage data — device model, operating system version, app version, language, approximate region, successful login times and methods, app session start, heartbeat and end times, and the features you view, use or complete. For signed-in users, this first-party usage data is associated with your account so that we can understand activity across iOS, Android and the web.
• Diagnostics — diagnostic and performance data to help us fix bugs, plus crash reports on platforms where crash reporting is enabled.
• Identifiers — app-instance identifiers and IP address (used in truncated form where possible). On iOS, the advertising identifier is available only if you grant Apple’s tracking permission. For adult free-tier users on Android, Google AdMob may access the Android advertising ID where it is available, subject to your consent choices and Android device settings.
• Website advertising and consent data — when website advertising is enabled, Google and its advertising partners may receive consent signals, the page URL, IP address, browser and device details, and cookie or similar identifier information needed to deliver, measure and protect advertising.
• Website analytics data — if you consent to optional analytics, Google Analytics may receive page URLs, referral sources, approximate location, browser and device details, article engagement, scroll completion, outbound-link clicks and file-download events. We do not intentionally send names, email addresses or other information that directly identifies you to Google Analytics.
• X campaign measurement — when X campaign measurement is enabled and you consent to both analytics and advertising measurement, X may receive page URLs, referral and campaign parameters, IP address, browser and device details, and cookie or click identifiers used to measure visits from ads. The X tag remains unloaded when the required consent is declined.
• Golden Trophy guest identifier — a random cookie used to resume a draft, limit abuse and keep only your best result on each leaderboard. We store a one-way hash rather than the cookie value itself.

Purchases

Mobile subscriptions are processed by Apple through the App Store or Google through Google Play and managed via RevenueCat. Website subscriptions are processed by Stripe. We store the Stripe customer and subscription identifiers, plan, status, renewal state and paid-period end so access can be shared with your phone apps. We do not collect or store your payment card details — those are handled by Apple, Google or Stripe, depending on where you subscribe.

2. Advertising

Website advertising

The Site may display advertising served by Google AdSense and voluntary rewarded advertising served through Google Ad Manager. If you choose a rewarded ad, we record the selected feature, a one-time reward session, completion state and the expiry of the resulting 30-minute access pass. Third-party vendors, including Google, may use cookies, web beacons, IP addresses or similar technologies to select, deliver, measure and protect advertising. Depending on your consent choices, Google and its partners may use advertising cookies to show ads based on your visits to this Site or other websites. If personalisation is unavailable or declined, you may still see contextual or non-personalised advertising.

Where required, Google’s certified consent management platform asks for and records your choices before those choices are used for personalised advertising. You can review how Google uses information from partner sites and apps in Google’s partner-sites notice, and manage Google ad personalisation through Google Ads Settings. The Site will also provide a privacy and cookie settings control when website advertising is enabled so you can revisit or withdraw your choices.

App advertising

The free tier of the App may show ads served by Google AdMob. Depending on your choices, these may be personalised or non-personalised. On first use we present a consent request (via Google’s User Messaging Platform) and, on iOS, Apple’s App Tracking Transparency prompt. You can decline tracking, and you can change your choice at any time in your device settings. Paid tiers (Lite and Pro) do not show ads.

On iOS and Android, we ask you to choose an age group before any advertising service can start. We store only that broad age group on your device; we do not collect a date of birth or send the choice to our servers. Advertising is disabled for users under 18. For eligible adult Android users, AdMob may use the Android advertising ID, where available, to select, deliver, measure and protect advertising. If personalised advertising is declined or the identifier is unavailable, contextual, non-personalised or otherwise limited advertising may still appear.

3. Analytics

Anonymous app-acquisition analytics

Before sign-in, the Android app records a limited sequence of first-party events such as first open, completion of the age gate, viewing the welcome screen, choosing an authentication method and whether account creation succeeds or fails. These events use a random installation identifier, which we store only as a one-way hash, together with app version and campaign parameters supplied by Google Play where available. We do not include your email address, exact age, selected age group, FPL Team ID, advertising ID or information you enter into the app. We use this information to measure and improve the installation and account-creation journey under our legitimate interests.

Signed-in product analytics

When you use the signed-in Service, we record first-party session and feature-interaction events to measure active use, foreground session duration and feature adoption. These events contain your FPLRogue account ID, platform, app version where available, a random session identifier and event time. We use this information to operate and improve the Service under our legitimate interests; it is separate from consent-based advertising tracking and does not include the content you enter into a tool.

Optional website analytics

With your consent, the Site uses Google Analytics 4 to understand how readers find and use our articles and tools. This includes page views, reaching the end of a page, outbound-link clicks and file downloads. We use these reports to improve editorial coverage, site performance and app-download journeys. The Analytics tag is not loaded where analytics consent is required unless you grant that consent, and you can revisit or withdraw your choice through the Site’s privacy and cookie settings control.

Google explains how it processes information from sites using its services in its partner-sites notice.

When configured for an X advertising campaign, the Site may also use the X Pixel to measure landing-page visits and campaign performance. It is subject to the same consent controls described above. X explains this technology in its X for Websites privacy notice.

4. How we use your information

• To provide and operate the Service, including projected points, AI transfer suggestions and simulations.
• To create and manage your account and subscription entitlements.
• With your consent, to send product updates and marketing, including new-feature, membership and offer emails.
• To send important administrative and service communications about your account or the Service.
• To verify whether you are eligible for any waitlist or early-access discount.
• To analyse and improve the Service, fix bugs and develop new features.
• To display and measure advertising (free tier), subject to your consent.
• To protect the Service against fraud and abuse, and to comply with our legal obligations.
• To run The Golden Trophy, save a draft, calculate season results and operate its public leaderboards.
• To administer the Lovable Rogues Monthly Challenge, verify eligibility, publish a valid result and deliver prizes.

5. Our legal bases (UK GDPR)

• Consent — for waitlist emails, founder pricing emails, product updates and marketing, personalised advertising, optional analytics and any optional winner interview or profile content. You may withdraw consent at any time.
• Performance of a contract — to provide the App and manage your subscription.
• Legitimate interests — to keep the Service secure, understand usage and improve our product, where this does not override your rights.
• Legal obligation — where we must retain or disclose data to comply with the law.

6. How we share your information

We do not sell your personal data. We share it only with service providers who help us run FPLRogue, including:

• Apple — App Store distribution and payments.
• Google — Google Play distribution and payments, Firebase services, Google Analytics, AdMob app advertising and AdSense website advertising.
• X — consent-gated website campaign measurement when an X advertising campaign is active.
• RevenueCat — subscription management.
• Stripe — secure website subscription checkout, billing management and payment processing.
• Hosting & infrastructure providers — to host our backend and store data securely.
• Email provider — to manage the waitlist and send service emails.

We may also disclose data where required by law, to enforce our terms, or in connection with a business transfer.

7. International transfers

Some of our providers process data outside the UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

8. Data retention

We keep personal data only for as long as necessary for the purposes set out above. Waitlist emails are kept until launch and for a reasonable period afterwards, or until you unsubscribe. If you redeem founder pricing, we may keep a record of your eligibility and redemption while your subscription remains active and for a reasonable period afterwards so we can administer the offer. Support and feedback submissions are kept while needed to investigate the message, improve the Service and maintain a reasonable record of the outcome. Account data is kept while your account is active and deleted or anonymised within a reasonable period after closure, including linked login, session and feature-usage data, unless we must keep it to meet a legal obligation. Anonymous app-acquisition events are normally retained for no longer than 90 days and are removed during routine analytics processing. Golden Trophy runs and public leaderboard entries are kept while the game and its historical boards operate, unless they are removed or anonymised following a valid request. Monthly Challenge administration and prize records are kept while needed to verify the result, fulfil the prize, handle complaints and meet legal or tax obligations; optional winner-profile material is retained until consent is withdrawn or the content is no longer used.

9. Your rights

Subject to applicable law, you have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• request erasure of your data;
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time; and
• lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, email us at support@fplrogue.com.

Delete your account

You can permanently delete your account in the App under Settings → Account → Delete Account. If you cannot access the App, use our account-deletion request page. Deletion removes or anonymises the account and its associated app data, subject only to limited records we must retain for legal, security or transaction-compliance purposes.

You can also use the same deletion request page to ask us to remove selected data—such as feedback, saved drafts, your watchlist, notification data or your linked FPL team—without deleting your account.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

Users aged 13–17 may use the Service, but the Android App does not initialise its advertising service or show ads to those users.

Users aged 13–17 may enter the Lovable Rogues Monthly Challenge only with permission from a parent or legal guardian. If a minor is selected as a provisional winner, we collect the minimum parent or guardian contact and confirmation information needed to verify eligibility and deliver the prize. We require separate consent from both the winner and their parent or guardian before publishing optional winner-profile content.

11. Security

We use technical and organisational measures, including encryption in transit, to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Third-party links

The Service may link to third-party sites or services that we do not control. This policy does not apply to them, and we encourage you to review their privacy policies.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date above. Material changes will be communicated where appropriate.

14. Contact us

Questions or requests about this policy or your data? Email support@fplrogue.com.