Privacy Policy

01Introduction

This Privacy Policy explains how Fantasy Pro League ("Fantasy Pro League", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use our mobile app, website, and related services (together, the "Service"). It also describes the rights and choices you have.

For the purposes of data-protection law, Fantasy Pro League is the controller of the personal information processed through the Service. By using the Service, you agree to the practices described here.

02Information we collect

Information you provide

• Account information — your name, email address, and password (passwords are stored only in hashed form).
• Profile information — username, profile photo, biography, nationality or country, and your club and role.
• Player details — playing position, platform, and gaming identifiers such as your EA / console persona or gamertag.
• Social links — links to your social media profiles that you choose to add.
• Content you submit — club news, ratings, highlights, support messages, and other materials you create.
• Communications — messages you send us, for example for support or account requests.

Information collected automatically

• Device and usage data — device type, operating system, app version, and how you interact with the Service.
• Log and technical data — IP address, general (approximate) region derived from it, and diagnostic information.
• Push notification tokens — a device token used to deliver push notifications, if you enable them.

Information from other sources

• Gameplay statistics — match results and player statistics originating from EA Sports FC Pro Clubs activity that are associated with your club or player and used to power fantasy scoring, leaderboards, and history.

03How we use your information

We use personal information to:

• Create and manage your account and provide the Service;
• Power gameplay — squads, lineups, transfers, contracts, fantasy scoring, leaderboards, awards, and history;
• Display your public profile, club, role, and statistics to other users as part of normal gameplay;
• Send service, security, and match-day communications, and — with your permission — push notifications;
• Keep the Service secure, including authentication, two-factor authentication, and login alerts;
• Respond to your requests and provide customer support;
• Monitor, troubleshoot, analyze, and improve the Service;
• Comply with legal obligations and enforce our Terms of Service.

04Legal bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases to process your information: performance of our contract with you (to provide the Service); your consent (for example, for push notifications, which you can withdraw at any time); our legitimate interests (to secure, analyze, and improve the Service, where not overridden by your rights); and compliance with legal obligations.

05How we share your information

We do not sell your personal information. We share it only in the following circumstances:

Service providers (processors)

We use trusted providers who process information on our behalf and under our instructions:

• Cloudinary — hosting and delivery of images and video you upload;
• Brevo — sending transactional and verification emails (including one-time codes);
• Expo — delivering push notifications to your device;
• Render — cloud hosting and the managed database that stores Service data.

Other users and the public

Parts of your profile — such as your username, photo, club, role, and statistics — are visible to other users and on leaderboards as part of normal gameplay.

Legal, safety, and business transfers

We may disclose information where required by law, to protect the rights, safety, and security of users or the Service, or in connection with a merger, acquisition, financing, or sale of assets, in which case we will continue to protect your information consistently with this Policy.

06Notifications and communications

If you enable push notifications, we store a device token to deliver them and honor the notification preferences you set in the app. You can turn off push notifications at any time in your device or app settings, and you can unsubscribe from non-essential emails using the link in those emails. We may still send essential service and security messages.

07Cookies and similar technologies

Our website uses a minimal set of cookies and similar technologies that are necessary for it to function and to remember your preferences. The mobile app uses local device storage to keep you signed in and to store settings. We do not use these technologies to sell your data.

08Data retention

We keep your personal information for as long as your account is active and for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it.

09Security

We use technical and organizational measures designed to protect your information, including encryption of data in transit, hashed password storage, optional two-factor authentication, login alerts, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond appropriately to any incident.

10International data transfers

We and our service providers may process and store your information in countries other than the one in which you live, including countries that may have different data-protection laws. Where required, we put appropriate safeguards in place — such as standard contractual clauses — to protect your information when it is transferred internationally.

11Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — ask us to correct inaccurate or incomplete information (much of which you can edit in your profile);
• Deletion — ask us to delete your information, or delete your account;
• Restriction and objection — ask us to restrict or object to certain processing;
• Portability — receive your information in a portable format;
• Withdraw consent — withdraw consent where we rely on it, such as for push notifications;
• Complaint — lodge a complaint with your local data-protection authority.

If you are a California resident, you also have the right to know, delete, and correct your personal information, and to opt out of the “sale” or “sharing” of your personal information. We do not sell or share your personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights. To exercise any of these rights, contact us at support@fantasyproleague.com. We may need to verify your identity before responding.

12Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Where local law sets a higher age of digital consent (such as 16 in parts of the EEA), that age applies. If you believe a child has provided us with personal information without the required consent, please contact us so we can delete it.

13Third-party links and services

The Service may link to third-party sites and services, including EA Sports and social media platforms. We are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party services you use.

14Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Please review this page periodically.

15Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at support@fantasyproleague.com.