Privacy Policy

Effective October 9, 2026 · Version 2026-10-09.1

You can play PlaySolitaire without creating an account. Games and preferences are saved in your browser. Completed games also contribute to public rankings, including when you play as a guest. This page explains what we collect, why, and the choices available to you.

Who runs PlaySolitaire

PlaySolitaire is operated by MB „NM Media“, company code 307668343, Druskininkų g. 12-37, 66168 Druskininkai, Lithuania. For privacy questions, email info@playsolitaire.io or use our contact form.

Games and settings on your device

Your browser stores saved games, move history, statistics, appearance and accessibility settings, and records that remember your first game and app-install choice. It also caches game files for faster loading and offline play. These records generally remain until replaced by the game or removed through your browser’s site-data settings. Older preferences may remain there too.

Playing as a guest does not upload your complete saved board or local statistics history. Results sent for rankings are described below. Signing in also enables account synchronization. A first-game cookie may be used when browser storage is unavailable and can last up to 365 days.

Public rankings

Completed games automatically enter the PlaySolitaire network’s daily rankings. Guests receive a generated nickname; accounts use a chosen public nickname or a generated alias. Your nickname, country flag, daily wins, win percentage, rank and the site you played on can be public. Country is estimated from your connection; we do not request GPS location. This feature operates independently of analytics consent.

The public ranking archive lasts 30 days, with one additional day of private result records to prevent duplicate submissions. A guest identity cookie lasts 30 days and renews with use. Clearing site data removes your browser identity; existing server results expire separately. Account deletion removes its ranking history and linked guest results.

Daily Challenge

Daily Challenge sends your moves and timing information to our servers to check results. Eligible guest wins appear automatically under a generated nickname. Signed-in or claimed results use your public nickname. Standings can show moves, hints and play time; detailed move logs remain private.

Your browser keeps up to eight Daily dates. Guest results and replay evidence are kept for 30 days after expiry or verification. Account results remain until account deletion. Separate moderation records contain internal references rather than account identities and have no automatic expiry.

Optional accounts

An account stores your email, nickname, securely hashed password, session information, saved boards, summarized progress and selected settings on our servers. Sessions include IP address and browser information for account operation and security. Signing in can transfer existing guest progress to your account. Browser storage keeps pending changes so synchronization can resume after an interruption.

Account data remains while your account exists. Sessions last up to 30 days and refresh with use. In Account, you can download your data or delete your account and synchronized records. A deletion confirmation record is kept for 30 days to handle repeated requests. Independent guest data on your device must be cleared separately.

Previous subscription payments

The paid ad-free subscription has been retired. We retain previous subscription and payment references, payment status and access dates while the account exists. Account export includes these records, and account deletion removes our billing links after closing any retained provider relationship. Stripe may retain financial records for legal accounting obligations. Card details are not stored by PlaySolitaire. This site no longer loads Stripe in your browser.

Analytics and cookies

Google Analytics measures visits, gameplay, settings use and performance using pseudonymous identifiers, page and session information, device details and approximate location. Google Signals is enabled and can associate eligible activity with signed-in Google users according to their Google settings. Analytics data is retained for 14 months, resetting with new activity. We also export analytics to Google Cloud BigQuery in the EU; that copy currently has no automatic expiry and remains until manually deleted.

Hotjar provides heatmaps and session recordings of clicks, taps, scrolling and page interactions. It runs only after permission through our site’s analytics controls and a later interaction. Permission through Google’s advertising message alone does not enable Hotjar. Form inputs use Hotjar’s default masking, but other on-screen content may be recorded.

An explicit analytics rejection always takes priority. In the EEA, United Kingdom and Switzerland, or when your region is unknown, analytics waits for a choice. Elsewhere, the site may enable analytics automatically when you have no saved choice. Your browser remembers your choice and may briefly hold pending analytics events and information linking a guide visit to a game. An opt-out cookie can last up to 365 days.

Use or the analytics opt-out page to change your choice. Withdrawal stops later collection and clears accessible analytics cookies and queued events. It does not automatically erase data already received by providers.

Advertising

Players may see Google AdSense advertisements on supported desktop, tablet and portrait-phone layouts. Google’s privacy message can load before play to collect advertising and analytics choices. Ad placements wait until you play and the applicable consent and placement conditions are met.

Google and its advertising partners receive IP address, device and browser information, page context and consent signals, plus advertising identifiers where permitted. The privacy message identifies partners and their choices. You can reopen it through Cookie settings. Global Privacy Control and applicable opt-out signals are honored by the advertising controls.

Hosting, security and error reports

Cloudflare delivers and protects the site, with Hostinger servers in Germany and the United States. These services process IP addresses, requested URLs, request headers including cookies, browser information, referrers, country and response details. Shared-result links can include game time, move count and streak information. Bunny remains available for residual requests during the CDN transition.

Sentry receives error reports, including error messages, technical traces, page URLs, browser details and recent interaction information, to help us diagnose failures. Server reports remove request bodies, cookies, headers and query values; error text and browser reports can still contain personal information. Error monitoring operates independently of analytics consent.

Application logs are kept for up to seven days; older system-log archives may remain for about 35 days. Retention for Cloudflare, Hostinger, Sentry, Hotjar, advertising and video services depends on their settings and policies. Providers may process data outside your country, including outside the European Economic Area.

Messages and feedback

Sending a message shares its contents, your supplied email address, language, page and feedback category with us through our email provider. Bug reports also include game and browser diagnostics to help reproduce the problem. Email stays in our mailbox until deleted; the application does not keep a separate copy. You can request deletion in your message or reply. Anonymous feedback cannot later be reliably linked to you.

Videos, links and sharing

YouTube tutorial players load when you choose to play a video or chapter. Hovering or touching a video control can first connect your browser to YouTube. Google may then receive connection and playback information and use cookies or browser storage under its own policies. Opening an external link sends a normal browser request to that website, which applies its own privacy policy. Merely listing a source or link does not contact it.

Sharing or copying a result uses the destination or clipboard you choose. The shared text or link may include your result and nickname; its later use depends on you and the receiving service.

Your choices and rights

Use your browser’s site-data controls to remove saved games, settings, caches and cookies. This can erase local progress; clearing cookies alone does not remove all saved game data. Use Account to export or delete server account data.

Depending on the law that applies to you, you may have rights to access, correct, delete or receive a copy of your personal data, restrict or object to processing, and withdraw consent. Contact info@playsolitaire.io about your request. You may also complain to your local data protection authority or Lithuania’s State Data Protection Inspectorate. Data stored only in your browser is controlled through that browser.

We update this policy when our data practices change. The effective date above identifies this version.