SolitairePrivacy Policy
The short version: we have no accounts, we run no analytics, and we set no cookies of our own. Your saved games and statistics stay in your own browser and are never sent to us. The site does sit behind Cloudflare, which sees every request, and that is described in full below.
Who this covers
This policy covers the website at solitaire-online.com, including the games, the guides and the blog. The site is run by an individual, not a company. Questions go to [email protected].
We do not collect personal information
There is no sign-up, no login, no newsletter and no form anywhere on this site. We do not ask for your name, your email address or anything else, so we do not hold any of it. The only way we learn your email address is if you choose to write to us.
What is stored in your browser
The games save their state using localStorage, a standard browser feature. This is not a cookie: it is never transmitted to us, is not sent with network requests, and cannot be read by other websites. It stays on your device until you clear it.
These are the only things stored, in full:
| Stored item | What it holds |
|---|---|
<game>_session | Your game in progress, so a hand survives closing the tab. For the solitaire games that is card positions, elapsed time, score, move count and undo history; for Hearts and Spades it is the four hands, the current trick, the bidding and the running scores. |
<game>_stats | Lifetime totals for that game: games played, games won, and the best time and score you have recorded. |
sol_draw | Whether you last played Klondike in Draw 1 or Draw 3. |
sol_spider_suits | Whether you last played Spider with one, two or four suits. |
sol_muted | Whether you turned the sound off. |
sol_promo | Whether we have already asked you what you think of the site, and when, so that we do not ask again. A count and a date — nothing about your answer. |
<game>_daily | Which days you have completed that game's daily challenge, and your best time, move count and score on each of them. |
sol_profile | Totals across all the games, used to work out achievements: games played and won, your fastest and longest games, which games you have tried, which days you completed a daily challenge, and your longest run of consecutive days. |
sol_achievements | Which achievements you have unlocked, and the date each one was unlocked. |
sol_lb_token | A random identifier created only if you submit a score to the daily leaderboard. It lets us show you your own row and lets you delete it. It is not linked to anything else about you. |
sol_lb_name | The display name you last used on the leaderboard, so you do not have to retype it. |
None of it identifies you, and all of it is deleted when you clear this site's data in your browser. With one exception, described next, none of it leaves the device it was created on, which is why a game started on your phone does not appear on your laptop.
The daily leaderboard
The daily challenge has an optional leaderboard, and it is the only part of this site that sends anything to our server. It is entirely opt-in: playing the daily challenge, winning it, and seeing your own calendar all happen on your device and send nothing. Nothing is submitted unless you type a display name and press Save.
If you do, four things are sent and stored: the display name you
chose, your time, your move count and your score for that day's deal,
together with the random sol_lb_token described above. We do
not ask for and do not store an email address, and there is no account
and no password. As with any web request, our server also sees your IP
address; it is used to rate-limit submissions and is not stored in the
leaderboard.
You can delete it at any time. Open the daily challenge panel after a win and choose Remove my entry, which erases every leaderboard row associated with your token immediately and permanently. You can also write to [email protected] and we will remove it for you.
Please do not use a real name, or anyone else's name, as your display name. Submitted names are shown publicly to other players.
Cookies
We set no cookies of our own. Nothing on this site uses a cookie to recognise you, remember you or follow you between pages, and there is no advertising or tracking cookie of any kind.
Cloudflare, described below, may set a security cookie of its own when it needs to tell automated traffic apart from real visitors. That is outside our control and is not used for advertising or profiling.
Server logs
Like essentially every website, the web server records a log entry for requests it serves. A typical entry contains your IP address, the date and time, the page or file requested, the response status, your browser's user-agent string, and the referring page if your browser sends one.
Cloudflare keeps its own equivalent records for the requests it handles, and gives us aggregate traffic figures such as total page views and rough visitor counts. Those figures are counted at the network level from requests, not by any script running in your browser, and they do not identify individual visitors to us.
These logs are used only to keep the site running and secure, meaning diagnosing errors, spotting abuse or attacks, and understanding load. They are not used to build a profile of you, are not combined with any other data, are not sold, and are not shared with anyone except where we would be legally required to. They are kept only as long as useful for those purposes and then discarded. Where a legal basis is required for this processing, it is our legitimate interest in operating a secure website.
Third-party services
One, and it is worth being precise about it.
Cloudflare
This site is served through Cloudflare, which acts as a content delivery network and reverse proxy in front of our server. Every request to solitaire-online.com passes through Cloudflare before it reaches us. Cloudflare terminates the encrypted connection, which means it can see the requests it handles, including your IP address, the page requested and your browser's user-agent string. It uses this to serve content quickly and to filter malicious traffic, and it processes that data under its own privacy policy as well as this one.
Cloudflare may set its own cookies or similar identifiers for security purposes, for example to distinguish automated traffic from real visitors. Those are not set by us and are not used to profile you for advertising.
Cloudflare also rewrites email addresses on the pages that show one, which are this page and the about, contact and terms pages. It replaces the address with an encoded version and adds a small script that decodes it in your browser, so that address-harvesting bots cannot read it. That script is served by Cloudflare, not by us. It is the only third-party code that runs on this site, it runs on those four pages only, and it does nothing except reveal an email address.
Your browser may also send network error reports to Cloudflare if a request fails, using a standard browser reporting feature that Cloudflare enables.
Everything else
Apart from that, there is nothing. No external fonts, no embedded videos, no social widgets, no comment system, no tag manager. Every asset the page requests, including scripts, styles, card images and icons, is our own file served from this domain.
In particular, the games themselves load no third-party code at all.
The share buttons in the footer, and the ones in the occasional "enjoying this?" panel, are ordinary links rather than widgets. Their icons are drawn by us and nothing is requested from Facebook, X, WhatsApp or Reddit while you are on this site. If you click one, your browser goes to that network's own page, and from that point you are on their site under their policy: they will see that you arrived from this page, as they would with any link. Not clicking them shares nothing.
Analytics
We do not use Google Analytics or any other analytics product, and no analytics script runs in your browser. The only traffic figures we see are the aggregate counts Cloudflare derives from requests, described under server logs above. There is no way for us to follow an individual visitor between pages.
Advertising
The site currently carries no advertising, and this section does not yet apply to anything. It is written in advance because advertising is the most likely way the site would eventually pay for itself, and we would rather set the expectation now than surprise you later.
If advertising is ever introduced, it would be served by a third-party advertising network. At that point, and not before:
That network would be able to set its own cookies or similar identifiers in your browser, and would receive your IP address and information about the pages you view here, under its own privacy policy rather than this one. Visitors in regions requiring consent for advertising cookies would be asked for it before any such cookie is set. This policy would be updated to name the network and link its policy, the "last updated" date at the top would change, and the about page would say so plainly.
Until you see that change on this page, nothing described in this section is happening.
Children
The site is suitable for a general audience and does not knowingly collect personal information from anyone, including children. Since there are no accounts, no forms and no tracking, there is no mechanism by which a child's personal information could be collected here.
Your choices and rights
Because we hold no personal data about you, there is generally nothing for us to look up, export or delete on request. What you can control directly:
Delete your saved games and statistics by clearing this site's data in your browser settings, or by using your browser's "clear browsing data" tool. Starting a new game also replaces the stored hand for that game.
Play without storing anything by using a private or incognito window, which discards everything when you close it, or by blocking site data for this domain. The games will still work; they simply will not remember anything.
If you have written to us and want that correspondence deleted, ask at [email protected] and we will delete it.
Security
The site is served over an encrypted connection. Since we hold no accounts, no passwords and no personal records, there is no store of personal data here to be breached — which is the strongest security measure available and the main reason the site is built this way.
Changes to this policy
If this policy changes, the "last updated" date at the top of the page changes with it. Material changes — particularly the introduction of advertising, analytics or any third-party script — will be described here before they take effect, not after.
Contact
Questions about this policy, or about privacy on the site generally, can go to [email protected].