Privacy policy

Last updated 28 October 2026.

Let’s Go Gaffer is a free, non-commercial Fantasy Premier League assistant run by Bandhan Patel as a personal project. This page says what it collects when you use it, why, who else sees it, and how to have it removed. Questions or requests: risingspy007@gmail.com.

What we collect

• Your sign-in. When you sign in with GitHub, Google or Microsoft, that service tells us your email address and your name or username. We use the email to recognise you. We never see your password.
• Settings you choose to save. Your FPL team id and, if you add one, your FPL login token. Both are encrypted (AES-256-GCM) with a key that is kept apart from the database, and the token is never shown back to any browser. An FPL token stops working after about an hour.
• How much you use the costly features. A daily count of your Ask questions, news searches and news refreshes, used only to apply the daily limits.
• Players you watch, and your alerts. When you star a player, we store that with your email address, and the news and status changes about that player go into your own inbox on the Alerts page. Only you see them.
• Your questions to Ask. They are sent to Anthropic to be answered. A conversation is held in the server’s memory while you use it and forgotten after 30 idle minutes; it is not saved to the database.
• Technical logs. The sign-in service records your email, the page or address requested and the time; the app records the path, the result and how long it took, without your search text or any token. The app also times each request and the calls it makes for it (to FPL, Anthropic and the news services), recording the page address without your search text, your IP address and your browser type, but not your questions or any token. Logs and these timings go to Datadog, which we use only to keep the site running.
• Cookies and browser storage. Sign-in cookies (one for your session, and a short-lived one that protects the sign-in step itself), and a cookie that keeps your Ask conversation on the same server. If saved settings are turned off, your browser may remember your team id itself. There are no advertising or analytics cookies.

What we do not do

We do not sell your data, show ads, or use analytics or advertising trackers: Datadog (below) is used only to find faults and slow pages. We never change anything in your FPL account: your token is used only to read your squad.

Who else handles it

• Microsoft Azure hosts the app and its database, in the United States.
• Fantasy Premier League (fantasy.premierleague.com) receives your team id, and your token if you saved one, to fetch your squad.
• Anthropic receives your Ask questions and the squad and player details needed to answer them.
• Voyage AI receives the text of news searches and Ask questions about news, to match them with stories.
• Datadog receives the technical logs and request timings described above, in the United States.
• GitHub, Google or Microsoft, whichever you sign in with, under their own privacy policies.

How long we keep it

• Saved settings: until you remove them on the Setup page or ask us to.
• Daily usage counts: 30 days, then deleted automatically.
• Ask conversations: not stored.
• Watched players: until you unstar them.
• Alerts in your inbox: until you ask us to delete them.
• Logs and request timings: 15 days in Datadog.

Your choices

You can remove your saved team and token at any time on the Setup page, and sign out from the menu. To have everything about you deleted, or to get a copy of it, email risingspy007@gmail.com from the address you sign in with; we reply within 30 days.

Security

The site is served only over HTTPS, the database is on a private network, and saved settings are encrypted as described above.

Children

The app is not meant for children under 13, or under 16 in the European Economic Area and the UK.

Changes

If this policy changes, the date at the top changes too.