Privacy Policy

Last updated: 9 August 2026

Bench the Bot is operated by Alexander Stewart, trading as Bench the Bot, a sole trader based in the United Kingdom ("we", "us", "our"). This policy explains what personal data we collect, why, and your rights over it under UK GDPR.

1. What we collect

  • Email address — if you create an account, used to sign you in via a one-time magic link (no password is ever stored).
  • FPL Team ID — optional, if you choose to link it to your account for personalised features. Your FPL Team ID is already public information on the official FPL site; linking it to an account is what lets us tell it's you.
  • Subscription status — whether you have an active Tier 1 Pro subscription, its status, and renewal date. We do not see or store your card details at any point — payment is handled entirely by Paddle (see below).

We don't ask for or store your name, address, or any FPL data beyond your Team ID.

2. Who we share it with

We use a small number of service providers to run Bench the Bot, each acting as a data processor on our behalf:

  • Supabase — database hosting and authentication. Your account, email and linked Team ID are stored in Supabase's infrastructure.
  • Paddle — payment processing and Merchant of Record for Tier 1 Pro. Paddle collects and processes your payment details directly; we never see your card number. See Paddle's own Privacy Policy.
  • Resend — sends the sign-in (magic link) emails on our behalf. Resend processes your email address only to deliver that email.
  • Vercel — hosts the website and provides Vercel Web Analytics, a cookieless, aggregated analytics tool (page views, approximate location, device/browser type) that doesn't identify individual visitors — see Vercel's Web Analytics privacy documentation.

We don't sell your data, and we don't share it with anyone beyond the providers listed above.

3. Cookies

Bench the Bot does not use cookies. Signing in keeps you signed in via your browser's local storage (not a cookie) — this stays on your device and isn't sent to third parties except the request that verifies your session with Supabase. Vercel Web Analytics (see above) is cookieless by design.

4. How we use your data

We use your data to: run your account and keep you signed in; send you the sign-in email when you request one; check whether you have active Tier 1 Pro access; and, if you've linked an FPL Team ID, to personalise features that use it.

5. Data retention and deletion

We keep your account data for as long as your account exists. You can request deletion of your account and associated data at any time by emailing us (below) — we'll delete your account record, linked Team ID and subscription reference within 30 days, except where we're required to keep transaction records for tax/accounting purposes (in which case Paddle, as Merchant of Record, retains what UK law requires them to).

6. Your rights (UK GDPR)

You have the right to: access the personal data we hold about you; have inaccurate data corrected; request erasure of your data; object to or restrict how we process it; and data portability. To exercise any of these, contact us below.

7. ICO registration

We are registered with the UK Information Commissioner's Office (ICO), registration number ZC135685. You also have the right to lodge a complaint with the ICO at ico.org.uk.

8. Changes to this policy

We may update this policy as the Service changes. We'll update the "Last updated" date above when we do.

9. Contact

Questions about this policy, or to exercise your rights above: benchthebotfpl@gmail.com