Mini League Mate, Privacy Notice
Introduction
Welcome to Mini League Mate’s privacy notice.
Fantasy Football Scout Ltd, trading as Mini League Mate, respects your privacy and is committed to protecting your personal data. This notice tells you how we look after your personal data when you visit this website, buy or receive the Products, or communicate with us electronically, and it tells you about your privacy rights and how the law protects you. It also covers the Fantasy Premier League data we process about managers who have never signed up with us, which is explained in its own section below.
The Products means the Gameweek Dossier and the Deadline Day email.
Please read it alongside the cookies section below, which lists every cookie this site sets.
- Important information and who we are
- The data we collect about you
- How your personal data is collected
- How we use your personal data
- Data about people who have not signed up with us
- Who can see a Dossier
- Disclosures of your personal data
- Cookies
- International transfers
- Data security
- Data retention
- Your legal rights
- Glossary
1. Important information and who we are
Purpose of this notice. This notice explains how Mini League Mate collects and processes your personal data through your use of this website, including any data you provide when you create an account, buy a plan, register a mini-league, join a mini-league’s list, or contact us.
Children. You must be 18 or over to buy a subscription from us. There is no age requirement to receive a mini-league’s Dossiers for free, because that needs only an email address on that mini-league’s list, and the Fantasy Premier League data inside a Dossier is about managers of any age, since that game is open to under-18s. We never ask anyone’s age, we do not profile anyone, and we run no analytics or advertising, so the most we ever hold about a child is an email address and the Fantasy Premier League data their own mini-league already publishes.
Controller. Fantasy Football Scout Ltd is the controller and is responsible for your personal data. Mini League Mate is a trading name of Fantasy Football Scout Ltd.
Contact details.
- Full name of legal entity: Fantasy Football Scout Ltd
- Person responsible for this notice: Tom Johnson
- Email address for privacy questions and requests, including any of the rights set out under your legal rights: privacy@minileaguemate.com
- Email address for everything else: chairmen@minileaguemate.com
- Postal address: 49 Green Avenue, London W13 9RW
You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (www.ico.org.uk). We would appreciate the chance to deal with your concerns first, so please contact us in the first instance.
Changes to this notice. This version was last updated on 29 July 2026. It is important that the personal data we hold about you is accurate and current. You can correct your own name and email address at any time on your account page.
Third party links. This website links to other websites, including Fantasy Premier League, Stripe’s hosted billing pages and Fantasy Football Scout. Clicking those links may allow those third parties to collect or share data about you. We do not control them and are not responsible for their privacy statements.
2. The data we collect about you
Personal data means any information about a person from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We collect, use, store and transfer the following kinds of personal data.
Identity Data. Your display name, if you set one, and for members whose membership is through Patreon, the full name Patreon holds.
Contact Data. Your email address. This is also your account: it is how you sign in, and it is where every Dossier and every notice about your subscription is sent.
Transaction Data. Your Stripe customer, subscription and payment identifiers, and a record of what your purchase granted you: which of the Products, how many mini-leagues, and whether backdated Gameweeks and Fantasy leagues are included. We never see, hold or store your card details. Those are held by Stripe.
Your mini-league data. The Fantasy Premier League id and name of each mini-league you register or join, the season it belongs to, and its status with us. For any Fantasy league you create, its title and the Fantasy Premier League manager ids you put on its list. For any managers you add as guests to a mini-league you pay for, their Fantasy Premier League manager ids.
Delivery Data. A record of each Dossier we email you: which mini-league, which Gameweek, whether it went as an attachment or a link, whether it was delivered, and the identifier the email service gave the message.
Sign-in Data. There are no passwords. You sign in either by a link we email you, or with Sign in with Google, in which case Google confirms your email address to us and there is no link to store.
For the emailed links, we store your email address against a one-way hash of each link we send, never the link itself, together with its expiry and whether it has been used. The same applies to the link that confirms an email address change, and to the link that offers a mini-league’s registration to another member.
Preference Data. How you want Dossiers delivered, as an attachment, a link or both, and whether you have opted out of marketing email.
Technical Data. Your IP address is read from the request when you use the contact form, the sign-in form or the join form, purely to limit how often those can be used. It is held in memory for the length of that limit, which is one minute, and is never written to our database. Our hosting providers keep their own request logs, which contain IP addresses, under their own retention terms.
Administrative Data. Where a member of our staff acts on your account, for example changing your plan or carrying out an erasure request, we record who did it, what they did, and to which email address.
Contact form data. Your name, email address and message. This is emailed to us and is not stored in our database.
What we do not collect. We do not use passwords, so there are none to lose. We do not collect special categories of personal data (race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, genetic or biometric data), and we do not collect information about criminal convictions or offences. We run no analytics and no advertising, so we build no profile of how you use the site.
If you fail to provide personal data. Your email address is the whole of what we need, and without it we cannot deliver a Dossier or run a subscription. If you do not give it, we cannot perform our contract with you.
3. How your personal data is collected
Directly from you. When you buy a plan, register a mini-league, join a mini-league’s list, set a display name, change your email address, set a delivery preference, or contact us.
Automatically. Your IP address and your request, as described under Technical Data above. We set no analytics or advertising cookies, so there is nothing else collected automatically.
From third parties.
- Stripe, when you buy or change a plan: your email address, your customer and subscription identifiers, and the status of your subscription.
- Google, if you choose Sign in with Google: your verified email address only. We ask for nothing else.
- Patreon, for members whose membership is through Patreon: email address, full name, membership status, the tier held, and the date the pledge began.
- Fantasy Football Scout, if you bought a bundle from them that includes Mini League Mate: your email address, and the fact that the bundle grants you a Mini League Mate plan.
- Fantasy Premier League, which publishes the mini-league and manager data every Dossier is built from, as described under data about people who have not signed up with us.
4. How we use your personal data
We only use your personal data when the law allows us to. Most commonly:
- where we need to perform the contract we have entered into with you;
- where it is necessary for our legitimate interests, and your interests and fundamental rights do not override those interests;
- where we need to comply with a legal or regulatory obligation.
| What we do | Data used | Lawful basis |
|---|---|---|
| Sign you in and keep you signed in | Contact, Sign-in, Technical | Performance of a contract |
| Take payment, run your subscription, and apply changes to your plan | Contact, Transaction | Performance of a contract |
| Build and send your Dossier, and let you download it | Contact, Your mini-league data, Preference, Delivery | Performance of a contract |
| Tell you about your account: sign-in links, address change confirmations, a handover offer or its acceptance | Contact, Identity | Performance of a contract |
| Answer your message to us | Contact form data | Performance of a contract, or our legitimate interest in answering enquiries from people who are not yet members |
| Keep records of what an administrator did to an account | Administrative | Legitimate interest, being able to show that an action, including an erasure, was carried out |
| Limit how often forms and downloads can be used | Technical | Legitimate interest, preventing abuse of our service and of the Fantasy Premier League API we depend on |
| Keep billing records after an account is closed or erased | Transaction | Compliance with a legal obligation |
| Send you marketing about our own products and services, if you have bought from us and have not opted out | Identity, Contact, Preference | Legitimate interest, telling our own customers about our own products, with an opt-out in every message |
| Publish, within a Dossier, the Fantasy Premier League data of the managers in a mini-league | Published Fantasy Premier League data | Legitimate interest |
Marketing. If you have bought a plan from us, we may send you marketing email about Mini League Mate’s own products and services. You can opt out at any time, from the link carried in every marketing email or by emailing chairmen@minileaguemate.com, and opting out never affects the emails your service depends on, your Dossiers, your sign-in links and the notices about your subscription. We do not send marketing to people who only receive a mini-league’s Dossiers for free, unless they have asked for it, and we do not share your personal data with anyone outside Mini League Mate for marketing purposes.
Unsubscribing. Dossiers for a mini-league stop as soon as you remove that mini-league from your account page, and that is the unsubscribe. Every Dossier email also carries an unsubscribe header that mail clients can act on, which sends a message to us.
Change of purpose. We will only use your personal data for the purposes we collected it for, unless we reasonably consider that we need to use it for another compatible reason. If we need to use it for an unrelated purpose we will tell you and explain the legal basis.
5. Data about people who have not signed up with us
A Dossier is a report about a Fantasy Premier League mini-league. To produce it, we read from the Fantasy Premier League API the data that game publishes about the mini-league and every manager in it: the manager’s name, their team name, their scores, ranks, transfers, captain choices and chips. We store that data in a database of our own, one for each season, and we compute statistics from it.
Most of those managers have never signed up with us, and many will never know we exist. We rely on legitimate interests for this: the data is already published by Fantasy Premier League to anyone who looks at the mini-league’s own page, a mini-league’s members have chosen to compete together in public, and the Dossier presents that same data in a more useful form to the people it is already visible to. We do not enrich it with anything from any other source, we do not use it for marketing, and we do not sell it.
If you are a manager in a mini-league we cover and you do not want your name to appear in its Dossiers, email privacy@minileaguemate.com. We will stop showing your manager name and your team name in that mini-league’s future Dossiers, replacing them with an anonymous label. Your points and rank remain, because they are part of every other member’s standings, and we cannot recall Dossiers that have already been sent. Because Fantasy Premier League issues everyone a new id each season, you may need to renew the request each season.
6. Who can see a Dossier
Anyone who knows a registered mini-league’s Fantasy Premier League id can add their email address to that mini-league’s list and receive its Dossiers. We do not check that they are in the mini-league, because we have no way to: Fantasy Premier League mini-leagues and their standings are public, and there is no link between an email address and a Fantasy Premier League manager that we could verify anyone against. A genuine member using a second email address and a stranger look identical to us.
A Dossier contains only data the Fantasy Premier League game already publishes about that mini-league, so this exposes nothing that was private. What it does mean is that being on a mini-league’s list is not a private fact, and you should treat a Dossier as you would treat the mini-league’s own public standings page.
Nobody can see your account, your plan, your billing, your email address or your other mini-leagues this way. Those are behind your sign-in.
7. Disclosures of your personal data
We share your personal data with the service providers listed below, each of which acts as our processor and may only use it on our instructions. We do not allow them to use it for their own purposes.
| Who | What they do | What they get |
|---|---|---|
| Stripe | Payments, subscriptions, the plan catalogue, and the hosted billing page where you manage your card | Your email address and your subscription history. Your card and billing details go straight from you to Stripe and never pass through us |
| Postmark | Sends every email we send: sign-in links, your Dossiers, address change confirmations, contact form messages, handover offers and administrative alerts | Your email address, and the content of the message |
| Neon | Hosts our databases | Everything we store, as listed under the data we collect about you |
| Vercel | Hosts the website | Everything you send to or receive from the site, in transit, and its own request logs |
| Render | Runs the service that draws each Dossier PDF | A season, a mini-league id and a Gameweek number, and the Fantasy Premier League data for that mini-league. It is never sent members’ email addresses |
| Sign in with Google, only if you use it | Your Google sign-in, from which we receive your verified email address | |
| Patreon | The membership platform some members joined through before this site existed | Applies only to those members, and only in the direction of Patreon to us |
We may also disclose your personal data to professional advisers acting as processors or joint controllers, including lawyers, bankers, auditors and insurers, and to HM Revenue and Customs, regulators and other authorities where they require it.
If we sell, transfer or merge parts of our business, or acquire or merge with another business, the new owners may use your personal data in the same way as set out in this notice.
8. Cookies
We set five cookies. We set no analytics cookies, no advertising cookies and no third party cookies of any kind, and nothing on this site tracks you across other websites. That is the whole list.
| Cookie | What it does | How long it lasts |
|---|---|---|
mlm_session | Keeps you signed in. It cannot be read by anything running in the page | 30 days |
mlm_signed_in | Lets the page swap “Sign in” for your account menu without reloading. It holds your display name, or your email address if you have not set a name, and it is readable by the page. It is never used to decide what you are allowed to do | 30 days |
mlm_return_to | Remembers which page to return you to after you click a sign-in link. Cannot be read by the page | 10 minutes |
mlm_google_pending | Holds the one-time values that protect a Sign in with Google round trip. Set only on that path, and cannot be read by the page | 10 minutes |
mlm_google_no_match | Carries the address to the “no matching account” page when a Google sign-in finds no account, so that the address does not travel in the URL. Cannot be read by the page | 5 minutes |
All five are strictly necessary for the site to work, so we do not ask for consent to set them. You can delete or block cookies through your browser settings, but if you block these you will not be able to sign in.
9. International transfers
Our databases are hosted in London, and the service that draws each Dossier runs in Frankfurt.
Some of our providers are US based: Stripe, Postmark, Google and Patreon all process data in the United States.
Whenever we transfer your personal data outside the UK we ensure a similar degree of protection by relying on UK adequacy regulations where they apply, or on the International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses. Please contact us if you want further information on the mechanism used for a particular transfer.
10. Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
Some of these are worth naming:
- There are no passwords, anywhere in the system, so there is no password database to breach.
- Every link we email you is stored only as a one-way hash. The link in your inbox is the only place its real value exists, so a copy of our database cannot be turned back into a way of signing in as you.
- We never hold card details.
- Access to member records by our own staff is limited to named people, is granted outside the application itself, and every action taken on a member’s account is recorded.
We limit access to your personal data to those employees, contractors and other third parties who have a business need to know, and they may only process it on our instructions and are subject to a duty of confidentiality.
If we suspect a personal data breach we investigate it, record what happened and what we did, report it to the Information Commissioner’s Office within 72 hours where the law requires that, and tell you without undue delay where the breach is likely to put your rights and freedoms at risk.
11. Data retention
We keep your personal data only as long as we need it for the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements.
Specifically:
- Dossiers are not stored. Every Dossier is drawn on demand from the season’s data. There is no archive of PDFs about you anywhere in the system.
- Billing records are kept for about six years, as UK law requires, even after you ask us to erase your data. See below.
- Sign-in links and email change links expire and are single use, and the records of them are cleared shortly after.
- Fantasy Premier League data is kept per season. Each season’s data lives in its own database, and past seasons are kept as read-only archives. Once Fantasy Premier League stops serving a past season through its API, our archive is the only remaining copy of it.
- The record that we carried out an erasure is kept, including the email address it was carried out for. It is the evidence that your request was honoured, and a record that deleted the proof of itself could not show that it had run.
12. Your legal rights
Under data protection law you have the right to:
- Request access to your personal data, commonly known as a subject access request: a copy of the personal data we hold about you, and a check that we are processing it lawfully.
- Request correction of personal data that is incomplete or inaccurate, though we may need to verify what you tell us.
- Request erasure of your personal data where there is no good reason for us to keep processing it, where you have objected, or where we have processed it unlawfully. We may not always be able to comply: where we cannot, we will tell you why.
- Object to processing where we rely on a legitimate interest and something about your situation makes you want to object. We may show compelling legitimate grounds to continue, which override your rights.
- Request restriction of processing, so we keep your data but stop using it, for example while you contest its accuracy or our grounds for it.
- Request transfer of your personal data to you or to a third party, in a structured, commonly used, machine-readable form. This applies only to data you gave us, where we processed it by consent or to perform a contract.
- Withdraw consent at any time where we rely on consent. It does not affect the lawfulness of anything done before you withdrew, and we will tell you if it means we can no longer provide something to you.
Some of these you can exercise yourself, immediately:
- Correction. Change your display name and your email address on your account page. An email address change takes effect once you click the link we send to the new address, and it moves your whole record together, including your billing email at Stripe.
- Stop receiving a mini-league’s Dossiers. Remove it from your account page.
For everything else, including access requests and erasure, email privacy@minileaguemate.com.
What an erasure actually does. We delete your recipient rows, your requests, your sign-in and email change records, any handover offers, and the record of the Dossiers sent to you. Where nothing has to be retained, we delete your customer record outright. Where a billing record we must keep points at it, we cannot delete that record, so instead we anonymise it: your email address is replaced with an address that can never resolve or be matched to you, your name and your Stripe identifier are cleared, and your preferences are emptied. Other people’s records, the mini-leagues themselves, and the Fantasy Premier League data about other managers are untouched.
One consequence we will tell you about before we act. If you are the only member paying for a mini-league, erasing your data means that mini-league stops being paid for, and everyone else on its list stops receiving its Dossiers. That is the correct outcome and we will carry out your request anyway, but we will tell you first.
No fee usually required. You will not have to pay a fee to exercise any of these rights. We may charge a reasonable fee, or refuse to act, if your request is clearly unfounded, repetitive or excessive.
What we may need from you. We may ask for information to confirm your identity, so that personal data is not disclosed to someone with no right to receive it.
Time limit to respond. We try to respond to all legitimate requests within one month. If your request is particularly complex, or you have made a number of requests, it may take longer, and we will tell you and keep you updated.
13. Glossary
Performance of contract means processing your data where it is necessary to perform a contract you are a party to, or to take steps at your request before entering into one.
Legitimate interest means the interest of our business in running and managing it so as to give you the best and most secure service. We consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests, and we do not do so where your interests override ours.
Comply with a legal or regulatory obligation means processing your personal data where it is necessary to comply with an obligation we are subject to.
Dossier means the PDF report we produce about one mini-league for one Gameweek.
Mini-league means a Fantasy Premier League classic or head to head mini-league, identified by the id that game gives it, which changes every season.
Free joiner means someone who receives a mini-league’s Dossiers without paying, because another member pays for that mini-league.
The Products means the Gameweek Dossier and the Deadline Day email.
Third parties we may share your data with are the service providers listed in the disclosures section, together with professional advisers such as lawyers, bankers, auditors and insurers, and HM Revenue and Customs, regulators and other authorities who require reporting in some circumstances.
Privacy questions and requests: privacy@minileaguemate.com. Everything else: chairmen@minileaguemate.com.