Privacy policy
Last updated: 6 October 2026
- No advertising, no tracking, no analytics, no selling of data – ever.
- We only use what we need to run your league page: your email to log in, public FPL league data, and whatever you choose to add (nicknames, photos, texts).
- Photos are turned into comic avatars. We never store the photo itself – only the comic.
- Anyone shown on a league page can ask us to hide or remove their name or avatar – here's how.
- Questions: privacy@yourminileague.com
1. Who is responsible
The controller for the processing described here is Pilko Trading LLC, a Florida limited liability company, 260 Calusa Blvd, Destin, FL 32541, USA ("Your Mini League", "we", "us"). Contact for all privacy questions: privacy@yourminileague.com.
Representatives in the EU and the UK (Art. 27 GDPR / UK GDPR): we will appoint them before the paid service starts and name them here. Until then, please contact us directly at privacy@yourminileague.com.
This policy applies to yourminileague.com, all league pages we host (for example yourminileague.com/your-league) and the admin area. It is written for everyone: visitors, people on the waitlist, league admins who subscribe, and league members who appear on a league page.
2. What we process, why, and on what legal basis
| What | Data | Why | Legal basis (GDPR / UK GDPR) |
|---|---|---|---|
| Visiting any page | IP address, browser type, requested page, time | Deliver pages, protect against attacks and abuse | Legitimate interests, Art. 6(1)(f) – a secure, working website |
| Waitlist | Email address, FPL league ID (optional), country (optional) | Tell you when we launch, invite leagues to the beta. We first send a confirmation email and only add you once you click the link in it (double opt-in); every email has an unsubscribe link | Consent, Art. 6(1)(a) – you can withdraw it at any time |
| Account (league admin) | Email address, login times, league ID, settings | Log in by email link, run your league page, send service emails (receipts, trial end, renewal reminders) | Contract, Art. 6(1)(b) |
| League page content | Nicknames, avatars, league logo, colours, past titles, archive uploads (screenshots of old tables), birthdays (day and month only, optional), competition settings | Show the league page the admin set up | Contract with the admin, Art. 6(1)(b); legitimate interests of the league, Art. 6(1)(f); for photos see section 4 |
| Public FPL data | Manager names, team names, FPL IDs, points, picks, transfers, chips, ranks | Build tables, awards, statistics and match reports | Legitimate interests, Art. 6(1)(f) – see section 3 |
| Payments | Plan, price, country, order number, payment status (no card details) | Know which leagues have paid; refunds | Contract, Art. 6(1)(b); legal obligations, Art. 6(1)(c) |
| Support emails | Your email, your message | Answer you | Contract or legitimate interests, Art. 6(1)(b)/(f) |
We do not use your data for advertising, we do not sell or "share" it for cross-context advertising, and we do not make automated decisions that have legal or similarly significant effects on you. Match reports, awards and "roasts" are generated automatically by our own software from fantasy football scores (no AI service involved) – they are light-hearted texts about fantasy football, not decisions about you.
3. If you play in a league that has a page with us
Fantasy Premier League shows mini league tables, manager names and team names to all members of a league and through its public data feed. When a league admin creates a page for their league, we read this data and show it on the league page. You may appear on a league page without having signed up with us yourself.
- Why we think this is fair: members of a mini league already see each other's names, teams and scores in FPL. A league page shows the same competition in a nicer way. We only use what's needed, never contact members for marketing, and do not show surnames by default – the admin can show nicknames instead.
- Who sees it: league pages are meant for the league. They are not listed in search engines (noindex) and can only be found with the link.
- Your choice: you can ask us at any time to hide your name, replace it with a nickname, remove your avatar or remove you from the page. Use the removal page or write to privacy@yourminileague.com. We act within 7 days and tell the league admin.
- Source of the data: the public Fantasy Premier League game (fantasy.premierleague.com) and the league admin.
We ask every league admin to tell their members about the league page and this policy, and we link this policy on every league page (Art. 14(5)(b) GDPR / UK GDPR), because we cannot contact members directly.
4. Photos and comic avatars
- League admins (and, where the admin allows it, members) can upload a photo, which is turned into a comic-style avatar by an AI image service.
- Consent: only upload a photo of yourself, or of someone who has agreed. The person shown can withdraw at any time – we then delete the avatar. Legal basis: consent of the person shown, Art. 6(1)(a).
- No photos of children (under 16).
- We never store the photo. It is passed straight to our AI image provider, which returns the comic; only the comic avatar is kept and shown. The provider does not use it to train its models and may keep it for up to 30 days for abuse monitoring before deleting it.
- The admin can also let the AI design a league logo from a short text idea.
- We do not use photos to identify anyone: no face recognition, no face templates, no matching. The AI provider may not use photos to train its models.
5. Service providers
We use carefully chosen service providers who process data only on our instructions under a data processing agreement. Payments are an exception: Paddle acts as an independent controller (merchant of record). Providers marked with * are only used once the paid service has started.
| Provider | What for | Location / safeguard |
|---|---|---|
| Cloudflare, Inc. | Hosting, database and file storage, content delivery, security, DNS, email forwarding | USA / global – EU–US Data Privacy Framework incl. UK extension |
| Paddle.com Market Ltd * | Checkout, payment, invoices, sales tax/VAT, refunds – independent controller, see Paddle's privacy policy | UK; standard contractual clauses |
| Resend, Inc. | Waitlist confirmation and welcome emails, login links and service emails (sent from EU servers in Ireland) | USA – standard contractual clauses |
| OpenAI, L.L.C. * | Turning photos into comic avatars, designing league logos (no training on our data) | USA – standard contractual clauses |
We update this list before we add a new provider.
6. Cookies and similar technologies
We do not use advertising, analytics or tracking cookies, so there is no cookie banner. Fonts are hosted on our own server – nothing is loaded from Google. We only use technologies that are strictly necessary for a service you asked for:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| __cf_bm, cf_clearance | Cloudflare | Tell people from bots, protect against attacks (only set when needed) | 30 minutes / up to 1 year |
| yml_s (login session) | Your Mini League | Keep the league admin logged in | Until logout, max. 30 days |
| CF_Authorization | Cloudflare Access | Login to protected test and admin areas | Up to 24 hours |
| Display settings in browser storage (e.g. "seen the draw", roast level chosen in the demo) | Your Mini League | Remember display choices on a league page; never leaves your device | Until you clear it |
7. International transfers
We are based in the USA, and some of our providers process data in the USA. Where data of people in the UK, EU or Switzerland is processed in the USA, we rely on the EU–US Data Privacy Framework (and its UK extension and Swiss framework) where the recipient is certified, and otherwise on the European Commission's standard contractual clauses and the UK addendum. You can ask us for a copy of these safeguards.
8. How long we keep data
- Waitlist: until you unsubscribe, at the latest 6 months after launch.
- Account and league page: while the plan runs. After a plan ends the page is paused; we keep it for 12 months so you can come back next season with your archive intact, then delete it. Admins can delete their league page at any time – it is gone within 30 days, including backups.
- Photos: not stored by us (provider: up to 30 days, see section 4). Avatars: until deleted by the admin, at the request of the person shown, or with the league page.
- Server logs (Cloudflare): short-term, as set by Cloudflare; we don't keep our own access logs.
- Payment and tax records: kept by Paddle as required by tax law; we keep order references for up to 7 years for accounting.
- Support emails: up to 2 years after the last message.
9. Your rights
Under the GDPR and UK GDPR you have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to withdraw consent at any time with effect for the future.
Right to object: where we rely on legitimate interests (for example showing public FPL data on a league page), you can object at any time for reasons relating to your situation. We will then stop, unless there are compelling legitimate grounds – for a league page we simply hide or remove you.
Write to privacy@yourminileague.com. We answer within one month. You can also complain to a supervisory authority – in the UK the Information Commissioner's Office (ico.org.uk), in the EU the authority in your country (list at edpb.europa.eu).
US residents: we do not sell or share personal information and do not use it for targeted advertising. You can ask us to access, correct or delete your data at the address above, whatever state you live in.
10. Children
To subscribe you must be at least 18. Our service is not aimed at children, and we do not knowingly collect personal data from children under 13. Fantasy Premier League allows younger players with parental permission; if a league has young members, the admin should only show nicknames, and photos of children must not be uploaded. Parents can ask us to remove a child's data at any time.
11. Security
All connections are encrypted (HTTPS). Login works by one-time email link, so we never store passwords. Access to our systems is limited to the people who run the service and protected by two-factor authentication.
12. Changes
We update this policy when our service changes. For important changes we tell subscribers by email in advance. The date at the top shows the latest version.
Terms of service · Cancellation & withdrawal · Withdraw from contract · Remove my name · Legal notice
Your Mini League is an independent fan service and is not affiliated with, endorsed, sponsored or approved by the Premier League or Fantasy Premier League.