GreenLight has no accounts, sets no cookies, and stores your team and your plans in your own browser. The one thing that does reach our server is your Team ID, because that's how your squad gets fetched from FPL — the detail is below, in plain English rather than legal boilerplate.
No signup, no password, no email address. We never ask for your FPL login, and we could not use it if you gave it to us — GreenLight only ever reads the public FPL data that anyone can see, and it cannot make a transfer, change your team, or act on your FPL account in any way.
Everything you build in GreenLight is saved in your browser's own storage —
localStorage — not on our server:
We hold no copy of any of it. That cuts both ways, and it's worth being clear about: if you clear your browser data, use a different device, or switch browsers, that work is gone and we cannot restore it for you, because we never had it.
To show your squad, your browser asks our server for the relevant FPL endpoint, and our server fetches it from FPL and passes the answer back. So the things any web server necessarily sees do reach ours: your Team ID, as part of that request, and your IP address. We keep no database, no profiles and no account records, so nothing is filed against you or built up over time — but ordinary, short-lived operational logs exist at our host, as they do on any website.
One upside of that arrangement, since it's the reason it's built this way: your browser never contacts FPL directly, so your IP address isn't exposed to FPL's servers. Requests arrive there from ours.
GreenLight sets no cookies at all — none for tracking, none for preferences, none needing a consent banner. Your settings live in the browser storage described above instead.
At most, GreenLight collects cookieless, aggregate visit counts — page views, country, device type, referring site — through our host, Vercel. That data cannot identify you and is never tied to your Team ID or your plans.
What we will not do, stated as a commitment rather than a description of today: no cookies, no cross-site or advertising trackers, no ad networks, no fingerprinting, and we never sell or share your data. If that ever changes, it changes on this page first.
That's the entire list. The site ships a strict Content-Security-Policy that blocks third-party scripts and connections outright, so nothing else can quietly attach itself to a page you load.
There's nothing to request from us, because we hold nothing tied to you. To erase everything GreenLight has stored, clear site data for this site in your browser settings, or use the theme/onboarding reset in the app. It takes effect immediately and completely.
GreenLight is built by one person. If something here is unclear or looks wrong, say so — email hello@greenlight-fpl.com, or find us on X at @GreenLightFPL. A real person reads both.