Privacy Policy

FieldTilt ("we", "us") operates www.fieldtilt.com and is a trading name of Kieron Sewell, a sole trader based in the United Kingdom. For anything relating to your data, including access or deletion requests, contact hello@fieldtilt.com.

We are the data controller for the information described below. We are based in the United Kingdom and this policy is written around the UK GDPR and the Data Protection Act 2018.

If you create an account. Your email address, and your first name if you give us one. We use a passwordless magic link, so we never see or store a password.

If you link your FPL team. Your Fantasy Premier League team ID and team name, which we use to generate picks for your squad. This is optional and you can unlink at any time, which removes it.

If you use the product. Any watchlist or squad selections you save, so we can show them back to you.

If you subscribe. A Stripe customer reference and your subscription status and renewal date. We never see or store your card details. Those go directly to Stripe.

When anyone visits. The page visited, the referring website's domain (not the full link), any campaign tag in the URL, a random session identifier stored in a cookie, and a one way hash of your browser's user agent string. We do not store IP addresses alongside this, and we do not build advertising profiles or sell data to anyone.

• To provide the service you asked for (performance of a contract): your account, your linked team, your saved selections, your subscription.
• Because you said yes (consent): marketing and product emails. You opt in explicitly and can opt out at any time.
• To keep the site working and understand roughly how it is used (legitimate interests): basic analytics, error logging, and abuse prevention. We deliberately keep this minimal.

We use a small number of established providers, each handling only what they need to:

• Supabase for the database and account sign in.
• Vercel for hosting and aggregate visitor analytics.
• Stripe for payments and card handling.
• Resend for sending email.

Some of these may process data outside the UK. Where that happens it is covered by the providers' standard contractual clauses and equivalent safeguards.

We use very few, and none of them are for advertising:

• Sign in cookies set by Supabase to keep you logged in.
• ft_sid, a random identifier so we can count visits without identifying you. It expires after 30 days.
• ft_dev, set only on our own devices so our testing does not pollute the visitor numbers.
• ft_pro, occasionally used to give someone a preview of paid features.

Account information is kept while your account exists. Analytics records are kept for up to 90 days and then deleted. Records we need for tax and accounting, such as payment history, are kept for six years because the law requires it.

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to send it somewhere else, object to how we use it, or withdraw your consent to emails. Email hello@fieldtilt.com and we will action it within 30 days. There is no charge.

To delete your account and everything attached to it, email us and say so. We will confirm once it is done.

If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can fix it.

FieldTilt is not aimed at children under 13 and we do not knowingly collect their data. If you believe a child has given us information, contact us and we will delete it.

If we change this policy we will update the date at the top, and if the change is significant we will email registered users rather than quietly editing the page.