Privacy Policy

1. Summary

We collect the minimum needed to run FPLHERMES: an account identity, your subscription status, the Fantasy Premier League data you choose to connect, and basic technical logs. We do not sell your data. We use one advertising tool, the Meta (Facebook) pixel, to measure which of our ads bring visitors and trial starts; in the UK, EU and Switzerland it only runs if you allow it.

2. What we collect

• —Account data — email address, and name and profile image if you sign in with Google
• —Subscription data — subscription status, billing period and payment reference held by our payment processor; we never receive your full card number
• —FPL data you provide — your squad, team ID, mini-league IDs and any team notes you save
• —Assistant conversations — questions you send to the HERMES console and the responses generated
• —Technical data — IP address, browser and device type, pages requested, and error logs

3. Why we use it

To create and secure your account, to run the projections and personalised tools you asked for, to take payment and manage your subscription, to answer support requests, to detect abuse, and to fix and improve the service. Our legal bases are performance of our contract with you, our legitimate interest in operating and securing the service, and consent where required.

4. Who processes data for us

These providers act on our instructions and may process data outside your country. Where that happens we rely on standard contractual clauses or an equivalent transfer mechanism.

• —Supabase — authentication and database hosting
• —Stripe — payment processing and subscription billing
• —Cloudflare — application hosting and content delivery
• —Google — optional sign-in, if you choose it
• —AI model providers — to generate HERMES assistant responses from the question you send
• —Meta Platforms (Facebook and Instagram) — ad measurement through the Meta pixel, only where you allow it or where consent is not required

5. Public football data

Player statistics, fixtures, prices, ownership and injury reporting are drawn from publicly available Fantasy Premier League endpoints and public injury reporting. This is not personal data about you.

6. Cookies, storage and the Meta pixel

We use strictly necessary cookies and local storage to keep you signed in, remember your saved team, and hold your interface preferences. Blocking essential storage will stop sign-in from working.

We also use the Meta (Facebook) pixel for advertising measurement. When it runs, it sets Meta cookies and sends Meta the pages you visit on FPLHERMES, your browser and device details, your IP address, and an event when you start a trial. We use this to count which Facebook and Instagram ads lead to visits and trials and to help Meta show our ads to people likely to be interested. We do not send Meta your email, name, squad or payment details.

If you are in the UK, the EU, the EEA or Switzerland (or we cannot tell where you are), the pixel stays off until you choose Allow in the cookie banner. We store your choice in your browser with the date and the version of the notice you saw. Elsewhere the pixel runs by default and you can switch it off. You can change or withdraw your choice at any time with Cookie settings in the site footer; withdrawing stops the pixel straight away. You can also manage ad preferences in your Facebook and Instagram settings.

7. Retention

Account and squad data is kept while your account is open and for up to 90 days after deletion in backups. Billing records are kept as long as tax and accounting law requires. Technical logs are kept for a short operational window.

8. Your rights

You can request access to, correction of, export of, or deletion of your personal data, and you can object to or restrict certain processing. Email support@fplhermes.com and we will respond within 30 days. You can delete your account at any time, which removes your saved squad, league configuration and assistant history. If you are in the UK or EU you may also complain to your local data protection authority.

9. Security and children

Data is transmitted over TLS and stored with row-level access controls so your saved team and league data are only readable by your account. No system is perfectly secure; if a breach affects you we will notify you and any regulator as required. The service is not intended for children under 16.

10. Contact

Questions, requests or complaints about privacy: support@fplhermes.com. We update this policy from time to time and will change the date at the top when we do.