What we collect

We never ask for your FPL password

Some tools ask you to log in to Fantasy Premier League through them so they can read your squad. We do not, and we will not. Handing your password to a third party is a bad idea regardless of who is asking, and it would give us access to far more than a team sheet.

The consequence is a real limitation rather than a feature: we can only read what FPL makes public. Your squad becomes public once a gameweek kicks off, which is why Rate My Team works from a Team ID and cannot show you anything before the first deadline of the season.

Team ID lookups are not logged

When you enter a Team ID, our server fetches that squad from FPL and returns it to you. The ID is not written to any log, database, or file - not even an access log - and it is not retained after the response is sent.

This is deliberate and it is not really about your ID. FPL's response contains a real person's name, so a log of lookups would be a growing file of other people's names sitting on a server for no reason anyone could justify. The safest way to hold that data is not to hold it.

One thing does get used briefly: your IP address, to apply a rate limit of 20 lookups per 60 seconds, so the endpoint cannot be turned into a scraper aimed at FPL. The counter lives in a short-lived cache and holds no identifying detail beyond that.

No third parties

• ·No analytics. We do not know how many people use this site, which is a genuine cost we accept.
• ·No advertising and no tracking pixels. Nothing on any page talks to another company about you.
• ·No cookies. Two things are kept in your browser's local storage, both on your device only and neither ever transmitted anywhere: a flag recording that you have dismissed the welcome note, and - if you have used Rate My Team - the Team ID you typed, so you do not have to type it again. Clearing site data removes both.
• ·Fonts are served from this domain, not from a font CDN - a CDN would receive your IP address on every visit.
• ·No embedded video, social widgets, or comment systems.

This is enforced rather than promised: the site sends a Content Security Policy that blocks connections to every host except this one. Adding a third-party script would mean changing that policy in the open, in a commit.

Donations

If you choose to donate, that happens on the payment provider's own site under their privacy policy, not ours. We never see your card details, and we have no way to connect a donation to anything you did here.

Where the data comes from

Player, fixture and club data is fetched from Fantasy Premier League's public endpoints once a day and committed to this site as static files. Your browser never contacts FPL directly, and FPL learns nothing about you from your visit here - the one exception being a Team ID lookup, which is relayed by our server rather than by your browser.

FPList is not affiliated with the Premier League or Fantasy Premier League.