Your data

Who is responsible

Top Dog Management is the data controller for this site. Top Dog Management is the member board responsible for administering the Top Dog Premier and Top Dog Championship leagues, and for deciding how the league’s personal data is used and published.

For anything on this page — including a request to access, correct or remove your data — write to privacy@thetopdog.uk.

The league — what is published now

This is the processing that happens today, every time the site is rebuilt.

What

Manager name, fantasy team name, division, and the fixtures, results, scores and standings those teams produce.

Source

The public Fantasy Premier League service, read from the two Top Dog leagues. Nothing is taken from a private or authenticated account, and no squad or transfer detail is published.

Purpose

To operate, document and publish the Top Dog competition — standings, fixtures, results and league reporting.

Lawful basis

Legitimate interests, proposed for administering and reporting a league its members chose to join. A balancing assessment is documented and available on request. We do not rely on consent for this, and we do not treat joining the league as consent — if you object, write to us and we will consider it on its merits.

Retention

Published league history is retained for as long as Top Dog maintains a public historical archive of the competition. Past seasons, standings and results are intended to remain available as part of that record. Top Dog Management reviews this once per season, after the final Gameweek and before the next season begins. The review asks whether identifiable manager information is still necessary for the historical record, and whether a record should stay identifiable, be anonymised, or be removed.

Who sees it

Anyone — it is a public website. It is hosted by Cloudflare, who process requests and serve the pages as our infrastructure provider.

Video — Top Dog TV

Episodes are hosted on YouTube. We use YouTube’s Privacy-Enhanced Mode (youtube-nocookie.com) for videos you choose to play. YouTube is not contacted until you interact with the video. The still image you see before then is served by us, from this site — so a page you only read behaves like every other page here: no player, no YouTube request, no cookie.

When you press play, your browser connects to YouTube and Google to load and stream the film. That connection is between you and Google. We do not receive it, cannot see it, and cannot control what Google does with it; their handling is governed by Google’s own privacy policy. We rely on your explicit action: nothing about the video is loaded, stored or read on your device until you press play.

We measured a play on 26 August 2026 from a browser with no previous Google cookies. These were the hosts contacted:

• www.youtube-nocookie.com
• i.ytimg.com
• yt3.ggpht.com
• fonts.gstatic.com
• www.gstatic.com
• www.google.com
• jnn-pa.googleapis.com
• googlevideo.com — the video itself, served from a differently-named machine each time

In that measurement no cookies were set, and the player wrote 3 keys to its own local storage inside the video frame. That is one observation of YouTube’s behaviour, not a promise about it — it is Google’s to change, and a reader signed in to Google may see something different. If you would rather that connection happened on YouTube’s own site than inside a page of ours, every episode also carries a plain Watch on YouTube link.

The Intelligence waitlist

What we store

Your email address, the time you signed up, and the version of the waitlist purpose you signed up under. We do not store your name, team, FPL account details, IP address, user-agent or tracking IDs in the waitlist database.

Why

To tell you once when the Intelligence application opens. That is the whole purpose. We record which version of this wording you signed up under, so that what you asked for stays provable rather than being reinterpreted later. We will not add you to a newsletter or send you anything else on the strength of this. If we ever want to, we will ask you separately.

Where it is stored

In Cloudflare D1, a database hosted by Cloudflare as our processor, encrypted in transit and at rest, and created under an EU jurisdiction restriction.

Bot protection

We use Cloudflare Turnstile to stop automated submissions. It is loaded only when you first click into the email field, so a reader who never touches the form never contacts Cloudflare’s challenge service. When you do interact with it, Turnstile processes technical information about your request — including your IP address — on Cloudflare’s side in order to tell a person from a script. That processing is Cloudflare’s, under their terms as our processor. Top Dog does not receive those fields and does not store them: the waitlist database holds the three items named above and nothing more.

Deleting it

Write to privacy@thetopdog.uk and we will remove your address. We cannot promise instant erasure: Cloudflare D1 keeps automatic point-in-time recovery for 7 days, so a deleted row can still exist in that recovery window before it ages out. Saying so is the difference between a disclosure and a promise we cannot keep.

How long we keep it

Until the application opens and you have been notified, or until you ask us to remove it, whichever comes first. If the application has not opened within 12 months of you signing up, we delete your address anyway. A trigger that never fires is not a retention policy.

Your rights

You can ask us to give you a copy of your data, correct it, or delete it. You can object to our publishing it. Objections are considered case by case: where one is upheld we remove or reduce the identifying information, and we look separately at whether the team name itself identifies you — removing a manager name does not by itself make a record anonymous. Where we can, we keep the non-identifying result so the league’s history stays intact. Write to privacy@thetopdog.uk.

If you are not satisfied with how we handle it, you can complain to the Information Commissioner’s Office, the UK supervisory authority.