Plain-English privacy.

• Your FPL Team ID, when you connect a team. We use it to fetch your public squad from the FPL API.
• Basic product analytics: which pages were visited, whether you connected a team, errors. No third-party ad networks.
• A session cookie / local-storage entry so you stay connected between visits.

• No name, email, or password — unless you explicitly send us one (e.g. emailing support).
• No cross-site tracking. No advertising pixels.
• No payment info — there is nothing to pay for.

We use a small matchday_xi_team cookie plus a few local-storage entries to remember your connected team and a per-session product-event ID. That's it — no behavioural tracking, no ad cookies.

• FPL public API (fantasy.premierleague.com) — we read your public squad and league data. No auth required, no data sent to them on your behalf.
• Understat — used internally to enrich expected-goals/assists history. No personal data leaves MatchdayXI.
• Hosting (Render) — runs the application servers. Standard request logs only.

We keep your team association and analytics events for as long as the product runs. If you want your team association deleted, email us and we'll wipe it.

Questions, deletion requests, or just want to say hi — hello@matchdayxi.com.