Privacy policy
Last updated 25 October 2026
This policy explains what information the 90sgames game apps (including Letterloom) and our game server collect, why, who else receives it, and how you can see or delete it. The apps are run by 90sgames ("we"). One account works in all of them, so this policy covers them all. Questions or requests: [email protected].
What we collect
| Information | When | Why |
|---|---|---|
| Display name | When you play online as a guest or sign up | Shown to the other players at your tables |
| Email address and password | Only if you sign up. Passwords are stored as one-way hashes; we can't read them | Signing in on another phone, password resets, invitations sent to you |
| Games and progress | When you play online, or play offline while signed in | Running your games, levels, Threads, hints and badges |
| Email addresses you invite | When you invite someone to a table | Sending them the invitation; kept until the table fills or is closed |
| Notification token | If you allow notifications | Telling you when it's your turn |
| Feedback and reports you send | When you use Send feedback or Report player | Answering you and keeping games safe |
| Technical data: IP address, device and app version, request times | Every time the app talks to our server | Keeping the service running, security and fixing faults |
| Crash reports and app usage events | While you use the app | Finding crashes and understanding which features are used (see Google below) |
Games against the computer and pass & play work without an account and stay on your phone, except for the scores sent to your progress when you're signed in.
Advertising
The games are free and show ads through Google AdMob. Google and its partners may collect your device's advertising ID, IP address and information about the ads you see and tap, and may use cookies or similar technology. In the UK, the European Economic Area and Switzerland we ask for your consent before personalised ads are shown; you can change your choice at any time in Settings → Ad privacy choices. You can also reset or delete your advertising ID in your phone's settings. See how Google uses information from apps that use its services.
Who else receives information
- Google: AdMob (ads), Firebase Crashlytics (crash reports), Google Analytics for Firebase (anonymous usage events and an app-instance ID) and Firebase Cloud Messaging (notifications on Android). Google may process this data outside your country.
- Apple: Apple Push Notification service, for notifications on iPhone.
- Our hosting and email providers, who run the server and deliver invitation and password-reset emails for us.
- Other players see your display name, scores and moves in games you play with them.
We don't sell your personal information or share it for anyone else's marketing.
How long we keep it
- Account, progress and notification tokens: until you delete your account.
- Finished games and tables that never started: deleted 30 days after they end.
- Server logs (IP addresses, requests): 30 days.
- Feedback and player reports: up to 12 months.
- Backups: up to 30 days, after which deleted data is gone from them too.
Your choices and rights
- Delete your account in the app (Settings → Delete account) or on the account deletion page. Your account, email, password, progress and notification tokens are deleted straight away; you leave any games in progress. Your name stays in the history of finished games other players can see until those are deleted after 30 days.
- Ad personalisation: Settings → Ad privacy choices in the app.
- Notifications: turn them off in your phone's settings.
- To get a copy of your data, correct it, or object to how we use it, email [email protected]. We'll answer within 30 days. Depending on where you live, you may also complain to your data protection authority.
Legal basis (UK and EEA)
We use your information to provide the game you asked for (contract), to keep it secure and working and to understand how it's used (legitimate interests), and for personalised advertising only with your consent.
Children
Our games are not directed at children under 13, and we don't knowingly collect personal information from them. If you think a child has given us information, email us and we'll delete it.
Security
Connections to our server are encrypted, passwords are stored only as salted hashes and sign-in tokens only as hashes. No system is perfectly secure, but we work to protect your information.
Changes
If we change this policy we'll update the date above, and tell you in the app for significant changes.