Privacy

Mispriced (mispriced.uk and the Android app). Last updated 25 October 2026.

Mispriced is a Fantasy Premier League tool. It has no accounts, no sign-in and no advertising. This page says exactly what it handles, how long it is kept, and how to have it deleted.

What stays on your device

Your browser keeps a few settings locally so the app remembers you: the team ID and league ID of the team you confirmed with "This is me" (nothing is remembered until you do), how many gameweeks ahead you look, theme, sound and music choices, whether you have seen the tour, and a random device key that marks which device designed a manager look. A copy of the confirmed team ID and league ID is also kept in a small cookie, so the app still remembers your team if the browser clears its other storage; the cookie goes along with each request to mispriced.uk, but the server does not read or store it. None of this is sent anywhere except as described below, and clearing your browser data removes it.

What the server receives

• Team and league IDs. When you enter a team ID, the server fetches that team from the official Fantasy Premier League API and saves it: the team name, the manager's name as it appears on FPL, and the team's picks, transfers, chips and past seasons. Entering a league ID also saves the league table (team and manager names) and the picks of every team in it, so the league view can compare them. All of this is public on the FPL site to anyone with the ID. It is kept so the views can be built, and it stays until you ask for it to be deleted.
• Manager looks. If you design a manager, the chosen skin, hair, beard, style and kit colours are stored against that team ID and shown to anyone viewing a league that team is in. A hash of your device key is stored so only your device can change it. No names or contact details are involved. Looks stay until you ask for them to be deleted.
• Deadline reminders. Only if you turn them on. Your browser then gives the server a push address and two keys, made by your browser's push service (Google's for Chrome and the Android app, or Apple's, Mozilla's or Microsoft's). The server keeps them, with the date your device last checked in, and uses them for nothing but a reminder 24 hours and 1 hour before each deadline. No team ID, name or IP address is stored with them. The reminder is encrypted so that only your device can read it; the push service only passes it on.
• Usage counts. The server adds one to a daily total each time the site is opened, a team or league is looked up, a manager look is saved, reminders are turned on, or a section such as Fixtures or Value is opened. Inside the Android app it also adds one to a separate daily total each time a page opens there. When you find your team, it also adds one to a total for how you found it (a league's invite link, a team number, a pasted FPL link or a league button), and for each tap on "This is me", "Not me", "Undo", "Change team" or "Send to your league". Only the date and the totals are kept: no IP address, team ID, device key or anything else that could tie a count to a person. They show which parts of the app get used.
• Which gameweeks a team was looked up in. When a team's own analysis is requested, the server keeps the team ID with the gameweek and the date, so returning teams can be counted. Only the counts are ever shown, never a team ID. A deletion request covers it.
• Feedback messages. If you use Send feedback in the menu, the server keeps what you typed, the email address if you chose to give one, whether you were on the website or in the Android app, the part of the page you were on and the app version. It is kept on the server, where the team reads it, for replying and improving the app. It is kept for 12 months unless you ask for it to be deleted sooner, and a deletion request covers it (give the email address you used). Do not put anything private in a message. No IP address is stored with it, and the site counts only how many were sent each day.
• Error reports. If the page breaks in your browser, it sends a short report so the fault can be fixed: the error message, the part of the page you were on, your browser's user-agent string, screen size and the time. No IP address or anything you typed is included, and long numbers such as team and league IDs are removed before a report is saved. Only the newest 1,000 reports are kept, and only the site's operator reads them.
• Web-server logs. Like any website, the server records each request (IP address, the address asked for, which can include a team ID, browser type and time) to keep the site running and to stop abuse. These logs are deleted within 14 days and are not shared.

Third parties

Fonts are loaded from Google Fonts, which means your browser contacts Google's servers to fetch them; Google's privacy policy applies to that request. Nothing else in the page is loaded from anyone else. Behind the scenes, the server takes player and fixture data from the official Fantasy Premier League API and match odds from The Odds API, both of which feed the model. Your browser never contacts either, and nothing about you is sent to The Odds API. No data is sold or passed on.

The Android app

The app is the website in a wrapper (a Trusted Web Activity). It asks for internet access, and for permission to show notifications only when you turn deadline reminders on. It handles data exactly as described above.

Deleting your data

On your device: clear the site's data in your browser, or clear the app's storage in Android settings. That removes everything listed under "What stays on your device".

Reminders: tap the bell at the top of the page to turn them off. That deletes your push address from the server straight away. If you block notifications instead, it is deleted the next time a reminder is sent, when the push service reports it has gone.

On the server: email hello@mispriced.uk with your FPL team ID and ask for your data to be deleted. The team ID is what finds your records; no other details are needed. Within 30 days, and usually much sooner, the following are deleted:

• your manager look and the stored hash of your device key;
• the record of which gameweeks your team was looked up in;
• everything saved about that team: its name, the manager name, picks, transfers, chips and history, and its row in any league table the server holds.

Not deleted: the daily usage totals and the error reports, because neither holds a team ID or anything else that could be matched to you. Web-server logs are deleted within 14 days anyway, and the nightly database backups, including the copy kept away from the server, are deleted after 14 days. Because the data comes from FPL, where it is public, a team is saved again whenever its ID, or a league it is in, is looked up again. That includes the operator's own mini-league, which the server refreshes every day.

Not affiliated

Fantasy Premier League and Premier League are trademarks of the Football Association Premier League Limited. Mispriced is an independent tool, is not affiliated with, endorsed by or connected to the Premier League, and the player figures are original artwork, not likenesses.