SQUADROOM

Your data, clearly explained

Privacy Policy

This policy describes what personal data Squadroom handles, why it is needed, who may receive it, and the choices and rights available to you.

Effective date30 July 2026Versionbeta-2026-07-30
01

Who controls your data

The operator below is the controller responsible for personal data processed through Squadroom:

Controller[Insert legal entity or sole trader name]Registration number[Insert organisation or registration number]Address[Insert registered business address]Privacy contact[Insert legal/support email address]
02

Scope of this policy

This Privacy Policy applies when you create or use a Squadroom account, connect a public FPL team, build a preseason squad, save decisions or plans, contact us, or otherwise use the website or installed progressive web app.

03

Personal data we process

  • Account information: email address, first and last name, country, preferred language, account identifiers and authentication records.
  • FPL information: the public team ID you connect and public manager, team, squad, gameweek, points, rank and league information returned for that ID.
  • Squadroom workspace: squad drafts, active squad changes, captaincy, planned transfers, watchlists, plans, decision-journal entries, custom estimates, recommendation feedback and preferences.
  • Technical information: IP address and basic request, browser, device, security, error and service-worker information generated when the service is used.
  • Communications: information you send when requesting support, exercising a right or reporting a problem.

Please do not submit sensitive personal data or another person’s private information.

04

Where the data comes from

We receive data directly from you, from your browser or device, from our authentication and hosting providers, and from public FPL interfaces when you provide a team ID. Squadroom does not ask for or receive your FPL password.

05

Purposes and legal bases

PurposeLegal basis
Create your account, authenticate you, sync your workspace and provide requested features.Performance of our contract with you.
Secure the service, prevent abuse, troubleshoot failures and maintain reliable operations.Our legitimate interests in security and service operation, and legal obligations where applicable.
Understand feature performance and improve recommendations using feedback and aggregated usage information.Our legitimate interests in improving Squadroom, balanced against your rights.
Handle privacy requests, disputes, accounting and legal compliance.Legal obligations and establishment, exercise or defence of legal claims.
Send optional marketing or non-essential notifications, if introduced.Consent, which you may withdraw at any time.
06

Automated recommendations

Squadroom uses calculations and models to rank players and generate transfer, lineup, captaincy and planning suggestions. Inputs may include fixtures, prices, expected minutes, projected points, availability and your selected preferences.

These suggestions do not make decisions for you and do not produce legal or similarly significant effects. You choose whether to use or ignore every recommendation.

07

Who receives data

We do not sell your personal data. We may disclose only what is necessary to:

  • Supabase: authentication, database and account infrastructure.
  • Hosting and technical providers: delivery, security, logging and operation of the service.
  • Public FPL services: requests needed to retrieve data associated with the team ID you provide.
  • Professional advisers and authorities: where reasonably necessary to obtain advice, protect rights or comply with law.
  • A successor operator: as part of a merger, financing, reorganisation or sale, subject to appropriate safeguards.

Providers acting as processors may use personal data only under our instructions and contractual safeguards.

08

International transfers

Some technical providers may process data outside Sweden or the European Economic Area. Where GDPR requires it, transfers will rely on an adequacy decision, approved standard contractual clauses or another lawful safeguard. Contact us for information about safeguards relevant to your data.

09

Cookies and device storage

Squadroom uses strictly necessary authentication cookies to keep you signed in. It also uses browser local storage and progressive-web-app caches to remember preferences, support offline assets and keep the interface responsive. Some workspace data is synchronized to your signed-in account.

We do not currently use third-party advertising cookies or sell data for targeted advertising. If non-essential analytics or marketing technologies are introduced, we will update this policy and request consent where required.

10

How long we keep data

Account and workspace data is generally retained while your account remains active. We delete or anonymise it after account deletion when it is no longer needed, subject to reasonable backup cycles and any legal need to retain security, transaction, dispute or compliance records.

Technical logs are retained only as long as reasonably necessary for security, troubleshooting and service operation. Device-stored data remains until the app, browser storage or relevant cache is cleared.

11

Security

We use reasonable technical and organisational safeguards designed to protect personal data, including authenticated access and database access controls. No online system is completely secure, so we cannot guarantee absolute security. Use a unique password and contact us if you believe your account has been compromised.

12

Your data-protection rights

Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing of your data, and to receive certain data in a portable format. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

To exercise a right, contact [Insert legal/support email address]. We may need to verify your identity. You may also complain to the Swedish Authority for Privacy Protection (IMY) or the competent supervisory authority where you live.

13

Children

Squadroom is not directed to children who cannot legally consent to use of the service or enter these Terms. If you believe a child provided personal data without required parent or guardian involvement, contact us so we can investigate and delete it where appropriate.

14

Changes and contact

We may update this policy as Squadroom, its providers or legal requirements change. We will update the effective date and provide additional notice for material changes where required.

Questions or privacy requests can be sent to [Insert legal/support email address], or by post to [Insert legal entity or sole trader name], [Insert registered business address].