Legal & Privacy

Privacy Policy

Ninety.football ("Ninety", "we", "us") is operated by a New Zealand-managed entity and is the Global Stadium for fans of British and European football. This policy explains what personal data we collect, why we collect it, and your rights. We process personal data in compliance with the UK GDPR, the EU GDPR, the UK Data Protection Act 2018, and the New Zealand Privacy Act 2020.

Data Controller

Ninety.football is the data controller, a New Zealand-managed entity. We comply with UK GDPR, EU GDPR, and NZ Privacy Act 2020 standards for all users worldwide. Contact: privacy@ninety.football.

What We Collect

• Account data (email, display name, avatar) when you sign up via email or Google.
• Profile preferences (favourite team, muted sources).
• User-generated content (chat messages, predictions, Stadium Sight photos).
• Engagement data (Roar score, points, badges).
• Technical data (device type, anonymised IP, error logs) to keep the service running.

Legal Basis

We process data under (a) contract — to provide the app you signed up for; (b) legitimate interests — to keep the service safe, prevent abuse, and improve features; and (c) consent — for optional cookies and marketing where applicable.

Where Your Data Lives

Ninety is operated by a New Zealand-managed entity. Your account data, profile, chat messages, predictions, and Roar history are stored in our managed Supabase project hosted in the London (eu-west-2) region, keeping British users' data inside the United Kingdom. Stadium Sight photos live in the same London region and are auto-purged every Tuesday at 01:00 UK time. AI moderation and summaries are processed through our AI Gateway; only the minimum necessary content is sent and it is not used to train third-party models.

Cookies & Analytics

We use strictly necessary cookies for sign-in sessions. Google AdSense may set advertising cookies; you can manage these via your device or browser settings.

Your Rights

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with the UK Information Commissioner's Office (ICO).

Request Data Deletion

Use the button below to request permanent deletion of your account and personal data. We will action verified requests within 30 days.

Children

Ninety is an 18+ service. It is not directed at anyone under 18, and we do not knowingly collect data from minors. If we learn that a user is under 18, we will delete their account and associated data.

Changes

We will update this page when our practices change and post the new effective date above.