In short
We store two things: a record each time an invite is used, and the name and email address of anyone who asks for an invite.
We don't store: your IP address, your FPL Team ID, your squads, your transfers or anything you do on the site.
No cookies are set for tracking, and nothing is sold or shared for marketing.
What we store
| When | What we keep | Why | How long |
|---|---|---|---|
| You use an invite link or code | The code, a random ID your browser makes for itself, the time, the country your connection comes from, and the first name of the person who invited you if the link carries one | To let one person in per personal invite, to count places on shared links, and to switch an invite off if it is misused | While the site is invite-only |
| You ask for an invite | Your name, your email address, who invited you if you came by a link, the page you asked from, and the time | To send you an invite. Nothing else is sent to that address. | Until you ask us to delete it, or the site stops being invite-only |
| A code is typed in wrongly | A scrambled, salted fingerprint of your connection. It can't be turned back into your IP address. | To slow down anyone guessing codes | Deleted after one day |
This data sits in a database run by Cloudflare. Only the site's owner can read it. Our lawful basis is legitimate interest for running the invite list, and your request in the case of an invite request.
What stays in your browser
These are saved in your own browser's storage and never sent to us. Clearing your browser's site data for gafferlab.app removes them.
| Saved | What it is for |
|---|---|
| Your invite | So you don't need the code again. The code and your browser's random ID are checked with our server now and then, so a withdrawn invite stops working. |
| Theme and table columns | Light or dark mode, and the columns you picked |
| Simulator squads and templates | Squads you built and saved |
| Squad league readings and custom squads | The squads Scout built each week, and your own entries |
| Planned transfers and lineup | Your plans for a Team ID, kept for the coming gameweek |
| Invite request marker | Shows that you already asked, so the form isn't offered twice |
Loading an FPL team
When you load a Team ID or open the live scores, your browser asks our server, which fetches the public data from Fantasy Premier League and passes it back. The answer is cached for about a minute so repeat requests are fast. We don't record which Team IDs are looked up, and we never ask for your FPL password.
A Team ID's squad, history and league positions are public on the Fantasy Premier League website. Anyone who has the number can see them.
Services we use
| Service | What it does | What it sees |
|---|---|---|
| Cloudflare | Hosts the site, its server and the invite database, and protects it from attacks | Your connection, as any web host does. Cloudflare may set a strictly necessary security cookie. |
| Google Fonts | Serves the site's two typefaces | Your IP address when the fonts load |
| Fantasy Premier League | The source of the football data | Requests from our server, not from your browser |
Your rights
Under UK and EU data protection law you can ask to see the data we hold about you, have it corrected or deleted, or object to how we use it. Email us from the address in question and we'll act within one month. To have an invite request deleted, just send the email address it was made with.
If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.
Gaffer Lab isn't aimed at children under 13, and we don't knowingly keep their details.
Contact
Gaffer Lab is an independent project. For anything about your data, email labgaffer@gmail.com.
If this page changes, the date below changes with it.