Privacy
What we store, why we use it, and what you can remove.
This notice describes the current Early Access service. Foresight XI is an independent FPL decision-support product. It uses public FPL data and does not ask for your Premier League password or an FPL refresh token.
Data we use
Account and authentication
Supabase Auth stores the account information and authentication records needed to create your Foresight XI account, sign you in, recover your password and manage active sessions. This includes your email address, account identifier and security/session metadata handled by the auth service.
Linked FPL data
Your team state
If you link an FPL entry, Foresight XI stores the public entry ID and the team state needed for personalised analysis, including squad players, captain/vice-captain, bank, free-transfer state, prices and chip state.
Public player, team, fixture and Gameweek reference data is also stored so the model and recommendation system can operate consistently.
Analysis data
Recommendations, Squad Builder and validation
Foresight XI stores recommendation jobs/results, the model artifact used, frozen recommendation evidence and later validation results so a decision can be reproduced and audited rather than silently rewritten afterwards.
Squad Builder selections, jobs and results may also be stored against your account so analysis can be queued, reused and recovered safely.
Feedback & operations
Support and service health
If you submit feedback, Foresight XI stores the category, message, optional page/context, submission time and your account identifier. Operational systems also retain technical service information such as job runtime, failure codes and infrastructure logs needed to operate and secure the service.
Why it is used
Purposes
- Authenticate your account and protect access.
- Import and maintain your confirmed public FPL state.
- Generate, queue, cache and audit recommendations and Squad Builder analysis.
- Prevent abuse, enforce rate limits and troubleshoot failures.
- Measure model/recommendation outcomes without changing historical calls.
- Respond to product feedback and improve the service.
Service providers
Where processing happens
Foresight XI relies on third-party infrastructure to provide the service: Supabase for authentication/database/storage, Railway for backend compute, Vercel for the website, and Cloudflare Turnstile for anti-bot protection. Those providers process technical/account data needed to deliver their part of the service under their own service terms and security controls.
Foresight XI does not currently use advertising trackers or behavioural analytics, and it does not sell your personal data.
Retention & deletion
Disconnecting FPL is different from deleting your account
Disconnect FPL removes the linked FPL ownership graph: your linked entry, connection/team state, team players/chips, recommendation jobs, recommendations and their validation history. It also removes any legacy private FPL credential if one exists.
Disconnecting deliberately leaves your Foresight XI login, Squad Builder history and feedback intact.
Delete account deletes the Supabase Auth identity and cascades through user-owned application data, including FPL state, recommendation data, Squad Builder jobs, feedback, private access records and active Auth sessions. Shared model/reference data is not user-owned and is not deleted.
While an account remains active, these records are retained as needed to provide and audit the service. Infrastructure providers may keep limited operational logs or backups according to their own retention processes.
Browser storage
No advertising or analytics cookie banner at present
The current Foresight XI application contains no advertising tracker, analytics SDK, custom marketing cookie code, or app-owned localStorage / sessionStorage feature. Authentication and anti-bot providers may use technically necessary browser storage to maintain sessions and security.
Because the current product does not deploy consent-requiring analytics or advertising tracking, Foresight XI does not show a decorative consent banner. This decision must be reviewed before adding analytics, advertising or other optional tracking.
Your controls
Access, disconnect and deletion
Account controls provide password change, global sign-out, FPL disconnect and permanent account deletion. Depending on applicable data-protection law, you may also have legal rights relating to your personal data.