Last updated: 1 November 2026
Ninety is operated by the following company, which is the data controller for the information described here:
Synnexo Pax S.R.L.
CUI: 43452387 · Registrul Comerțului: J15/1309/2020
Drumul Guliei nr. 189, Sat Samurcași, Comuna Crevedia, Județul Dâmbovița, Romania
Contact: admin@playninety.com
Ninety (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our football management game and related services.
We believe in transparency. We collect only what we need, use it only for the game's operation, and never sell your data.
We do not store your password. Sign-in is handled by Google Firebase Authentication; your password never reaches our servers. If you sign in with Google, we never receive your Google password either — only a signed token proving Google recognised you.
At sign-up we detect the country your connection comes from, in order to place you in a league for that country. It is shown to you before you confirm, and you can change it.
If you upload a club crest, we store that image so it can be shown as your club's badge.
| Purpose | Data used | Legal basis |
|---|---|---|
| Account creation & login | Account identifier, manager name, email | Contract performance |
| Match simulation & multiplayer | Gameplay data, tactical choices | Contract performance |
| League tables & rankings | Match results, club progression | Legitimate interest |
| Placing you in a league | Country of connection | Contract performance |
| Freeing abandoned clubs | Last active time | Legitimate interest |
| Showing your club badge | Uploaded crest | Consent |
| Processing a donation | Handled by Stripe; we see only that a donation occurred | Contract performance |
| Switching on the supporter pack after a donation on the web | The email you donated with, matched to your account | Contract performance |
| The supporter pack bought in the app | From Google Play or the App Store: the product, its period, its status and refunds; a scrambled tag of your account, so the store's purchase is credited to the right account | Contract performance |
| The one-time supporter month paid with club money | Whether your account has used it, and a scrambled form of your email address, so it can be used only once per email address | Legitimate interest |
| Deciding whether to show a donation prompt | Days played, when you were last asked | Legitimate interest |
| Knowing who has looked at supporting the game | When you tapped Support Ninety or a donation button | Legitimate interest |
| Choosing what to show you, and when to ask for support | Your play style, worked out from your gameplay | Legitimate interest |
| Important updates | Email address | Consent (opt-in) |
We do not sell, rent, or trade your personal information. Data is shared only in these limited circumstances:
Data may be stored on servers outside your country, including in the European Union and the United States.
No system is perfectly secure, but the most sensitive data — passwords and payment details — is data we simply never hold.
You can exercise most of these yourself, immediately, from Settings in the game — no email required:
For anything you cannot do in-app, contact us; we respond within 30 days.
You also have the right to complain to a data-protection authority. As we are established in Romania, our lead authority is the Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — dataprotection.ro. If you live elsewhere in the EU or UK, you may complain to your own local authority instead.
Your account record is kept while your account exists. If you stop playing, your club is released after about 30 days of inactivity, but your account record remains until you delete it. Deleted data is removed from live storage immediately and from routine backups within 30 days.
When you delete your account, a few records stay, with your name and email removed: which clubs were run from your internet connection, and the transfers your club made, so that other clubs’ trades can still be checked for fair play; and what was counted against the internet address you created the account from — how many clubs were created from it, and any loan a deleted club left unpaid — so that the limit on sign-ups still holds. If you asked us not to email you, your email address stays on our do-not-email list, so that we never write to it again; an address blocked for abuse stays blocked. If you used the one-time supporter month paid with club money, a scrambled form of your email address stays too, so that a new account on the same address cannot take the offer again; it can only be used to recognise that address, never to read it back.
Ninety does not use:
We use only an essential session cookie for authentication. In the mobile app, the equivalent session token is stored on your device.
To understand how the game is used — and only that — we record a small set of anonymous, aggregate numbers. This is our own measurement; no third-party analytics service is involved.
When you close the app, it reports once:
No identifier of any kind is created, stored, or sent — no device id, no visitor id, no analytics cookie, and nothing is written to your device for this purpose. The report cannot be linked to your account, and two sessions by you are indistinguishable from sessions by two different people. Because the data identifies nobody, it is not personal data.
Nothing you type is ever included: no names, no messages, no club or player names — only counts of names chosen by us in the code.
These aggregate counts are kept for up to 90 days.
The statistics above deliberately have no identifier, which means they cannot tell us whether the same person returned. To understand that, we count — in aggregate only — how many accounts were active in the last day, week and month, how many are new, and how many days each account has played. These figures are worked out from information the game already keeps to run itself (your last-active time exists so that an abandoned club can be returned to computer control), so nothing extra is collected about you.
The result is a set of totals — "so many accounts were active this week" — never a list, a profile, or a history of what any individual did. Your own activity figures are included in the file you get from Settings → Download my data.
Ninety is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
We may update this policy as the game evolves. Significant changes will be notified in-app and you will be asked to accept the new revision. Continued use after changes constitutes acceptance.
Just as we don't monetise your gameplay, we don't monetise your data. Your trust is the only currency that matters.