Privacy
Last updated 19 August 2026
Solitaire is a card game. It collects what it needs to keep your games and your record, and nothing else. There is no analytics, no advertising, and no third-party tracking of any kind.
Playing without an account
You can play without giving anything at all. A guest game is tied to a cookie on your device and nothing else — no email address, no password, no name. If you later create an account, the games you played as a guest move onto it. If you never come back, the guest record and its games are deleted after thirty days.
What is collected if you sign up
- Your email address, so you have an account to sign in to and somewhere to send a password reset.
- Your name, only if you choose to enter one. It is optional and used only to greet you.
- Your password, stored as a bcrypt hash. The password itself is never stored and cannot be recovered from the hash.
- Your Google account identifier and email address, if you sign in with Google on the web. No other Google data is requested and the connection is not kept open — the account is read once, at sign-in.
- Your games: the shuffle, the moves, the score, and how long each one took.
- Each sign-in: the IP address and browser the session was started from, so you can tell your own sessions apart from somebody else's.
What it is used for
Running the game, and only that. Your data is not sold, rented, shared for advertising, or handed to anyone for their own purposes.
Who else touches it
- Hetzner hosts the server, in Germany.
- Cloudflare R2 holds the encrypted database backups, in the European Union.
- Google, only if you choose to sign in with Google, and only to confirm who you are.
Each of these is a processor acting on instruction. None of them is permitted to use your data for their own ends.
How long it is kept
Until you delete it. There is no automatic expiry of an account you are still using.
Deleting your account removes your record, your games, and your sessions immediately and permanently. Database backups roll forward continuously and older ones are discarded after seven days, so a deleted account is gone from the backups within a week.
Deleting your data
Open Account and choose Delete account. It is immediate, it is complete, and it does not require asking anyone. If you cannot reach that screen, write to support@candanedo.dev and it will be done for you.
Cookies
One cookie, holding your signed-in session. It is not used to follow you anywhere. The sound setting is kept in your browser's local storage, on your device, and is never sent anywhere.
Children
The game is suitable for all ages and collects nothing beyond what is listed above from anyone, of any age.
Changes
If this policy changes in a way that affects what is collected or who sees it, the date at the top changes with it.