Privacy

Who we are

Overtake is an independent product, not affiliated with or endorsed by the Premier League or Fantasy Premier League. Contact: hello@overtakefpl.com.

What we collect about you

• Your email address. It is how you sign in — there is no password — and how the Deadline Brief reaches you.
• An age band, not your date of birth. We ask for a year of birth, derive a band from it, and store only the band. The year itself is never written down.
• Your FPL manager ID and the leagues you choose to track, so we know whose squad is yours.
• A session cookie and, if you consent, analytics cookies.
• Your Ask-the-Gaffer conversations, kept for 30 days and then deleted.

We do not collect your date of birth, your address, your phone number, or any payment details. Stripe handles cards; we never see them.

Data about other managers

Overtake analyses public data about people in your league who may not be Overtake users: their team name, their squad, their transfers and their position in the table. All of it is already published on the FPL website, and we do not enrich it, sell it, or use it for marketing.

If you appear in someone else's Overtake league page and would rather not, email us with your FPL manager ID and we will suppress you from every page, permanently. You do not need an account to ask.

Why we are allowed to hold it

• To give you the service you signed up for — your account, your leagues, your briefs. (Contract.)
• To keep the product working and safe — rate limiting, abuse prevention, and aggregate product analytics. (Legitimate interests.)
• Marketing email and analytics cookies — only if you say yes, and only if you are an adult. (Consent.)

If you are under 18

You need to be at least 13 to have an account. Between 13 and 17 you get the free plan and the full product features that run on public FPL data. We do not sell Pro to under-16s, we do not send you marketing email at any age under 18, and we do not build behavioural profiles of you.

We do build behavioural profiles of FPL managers from their public transfer history — that is the product. It is analysis of publicly published game moves, not of a person's browsing, and it is never used to target anyone with advertising.

How long we keep things

• Raw copies of FPL API responses: 30 days.
• Ask-the-Gaffer conversations and AI request logs: 30 days.
• Sign-in links: 15 minutes to use, deleted 7 days after they expire.
• Aggregate analytics events: 180 days.
• A deleted account: access ends immediately, everything is permanently purged within 30 days.

Who we share it with

Only the services that make the product run: Stripe for payments, Resend for email, our hosting and database providers, and an AI provider for the written part of the Deadline Brief. The AI provider receives computed numbers and first names from your league — never your email address, and never anything it could use to identify you.

We do not sell your data. There is no version of this product where we do.

Your rights

You can export everything we hold, or delete your account outright, from your account page — no email, no form, no waiting. You can also object to processing, ask us to correct something, or complain to your national data protection authority.

Cookies

Essential cookies only, unless you accept the banner. Details are on the cookies page.

Security

There are no passwords in Overtake, so there is no password of yours to leak. Sign-in links and sessions are stored only as hashes, everything travels over TLS, and access to production data is limited and logged.