xPoints

Privacy Policy

Last updated: 11 August 2026

1. Data We Collect

We collect the minimum data required to operate the service:

  • Email address — provided when you create an account via Supabase authentication.
  • Squad-analysis waitlist — if you leave your email on the pre-season team screen, we store that email with your FPL team ID and team name (plus any referral/UTM tags from our attribution cookie) in a waitlist table, used solely to send you the squad analysis you asked for.
  • Usage analytics — anonymous page-view data to understand how the service is used.

2. How We Use Your Data

Your email is used solely for account authentication and essential service communications. We do not send marketing emails. Usage analytics are aggregated and never linked to individual users.

3. Data Storage

Account data is stored in Supabase (EU region). We do not maintain additional copies of personal data beyond what Supabase holds for authentication.

4. Data Sharing

We do not sell, rent, or share your personal data with any third party. We do not use ad networks, tracking pixels, or third-party analytics services that identify individual users.

5. Cookies

xPoints uses only essential cookies required for Supabase authentication sessions. We do not use advertising cookies, tracking cookies, or any non-essential cookies.

6. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Deletion — request that we delete your account and all associated data.
  • Portability — receive your data in a structured, machine-readable format.
  • Rectification — request correction of inaccurate data.

To exercise any of these rights, email noreply@nicobal.me.

7. Data Retention

Account data is retained for as long as your account is active. If you request deletion, we will remove all personal data within 30 days.

8. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via the service. Continued use of xPoints after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or data requests, contact us at noreply@nicobal.me.