Privacy Policy

1. Summary

We collect the minimum needed to run FPLHERMES: an account identity, your subscription status, the Fantasy Premier League data you choose to connect, and basic technical logs. We do not sell your data and we do not run advertising trackers.

2. What we collect

• —Account data — email address, and name and profile image if you sign in with Google
• —Subscription data — subscription status, billing period and payment reference held by our payment processor; we never receive your full card number
• —FPL data you provide — your squad, team ID, mini-league IDs and any team notes you save
• —Assistant conversations — questions you send to the HERMES console and the responses generated
• —Technical data — IP address, browser and device type, pages requested, and error logs

3. Why we use it

To create and secure your account, to run the projections and personalised tools you asked for, to take payment and manage your subscription, to answer support requests, to detect abuse, and to fix and improve the service. Our legal bases are performance of our contract with you, our legitimate interest in operating and securing the service, and consent where required.

4. Who processes data for us

These providers act on our instructions and may process data outside your country. Where that happens we rely on standard contractual clauses or an equivalent transfer mechanism.

• —Supabase — authentication and database hosting
• —Stripe — payment processing and subscription billing
• —Cloudflare — application hosting and content delivery
• —Google — optional sign-in, if you choose it
• —AI model providers — to generate HERMES assistant responses from the question you send

5. Public football data

Player statistics, fixtures, prices, ownership and injury reporting are drawn from publicly available Fantasy Premier League endpoints and public injury reporting. This is not personal data about you.

6. Cookies and storage

We use strictly necessary cookies and local storage to keep you signed in, remember your saved team, and hold your interface preferences. We do not use advertising or cross-site tracking cookies. Blocking essential storage will stop sign-in from working.

7. Retention

Account and squad data is kept while your account is open and for up to 90 days after deletion in backups. Billing records are kept as long as tax and accounting law requires. Technical logs are kept for a short operational window.

8. Your rights

You can request access to, correction of, export of, or deletion of your personal data, and you can object to or restrict certain processing. Email support@fplhermes.com and we will respond within 30 days. You can delete your account at any time, which removes your saved squad, league configuration and assistant history. If you are in the UK or EU you may also complain to your local data protection authority.

9. Security and children

Data is transmitted over TLS and stored with row-level access controls so your saved team and league data are only readable by your account. No system is perfectly secure; if a breach affects you we will notify you and any regulator as required. The service is not intended for children under 16.

10. Contact

Questions, requests or complaints about privacy: support@fplhermes.com. We update this policy from time to time and will change the date at the top when we do.