Privacy Policy

1. Who is responsible

MN Media s.r.o., Varšavská 715/36, Vinohrady, 120 00 Praha 2, Czechia, is the controller for FreeSolitaire.gg. Contact privacy@freesolitaire.gg about this notice or your rights. You can play without an account and without allowing optional analytics or session recordings.

2. Essential operation and security

Your browser sends an IP address and ordinary request information when it connects. Our hosting and delivery providers process these to serve and protect the site. Operational logs can contain IP addresses, request addresses, browser information, response status and timing; our server journals are retained for up to seven days. We use short-lived in-memory rate limits to prevent abuse. Our legitimate interests are reliable service, fraud prevention and security.

We store theme, language, saved games, game statistics and privacy choices in your browser to provide the features you use. Saved game data stays on your device. Browser storage remains until you clear it or the relevant feature replaces it. Consent choices expire after 180 days or when their scope changes.

3. Optional analytics

Only after you choose Analytics, we collect game actions, failure categories, page and language, browser/device category, release version, performance measurements and random visit/page identifiers. We exclude form text, card layouts, raw URLs and error messages from these events. They remain on our server for up to 14 days. The legal basis is consent.

We also use self-hosted Plausible for aggregate traffic statistics after analytics consent. Its processing takes place on our infrastructure and it sets no analytics cookies. Aggregate statistics that no longer identify a visitor cannot be individually retrieved or erased. We do not use third-party advertising trackers.

4. Optional session recordings

A separate recording choice lets us observe game-page layout, cards, clicks, pointer movements and scrolling to investigate usability problems. Each recording captures up to five minutes and is kept for up to 30 days. Forms and feedback dialogs are excluded; input values, ordinary text, URL queries and fragments are removed. Recordings use a random identifier and can still be personal data. They are stored on our own server. The legal basis is consent.

5. Consent and withdrawal

Analytics and recordings are off until you make a choice and our server acknowledges it. We retain a minimized consent receipt: a random ID, a hash of its control token, the choices, language, time, expiry and the notice shown. No IP address is stored in this receipt. It is retained until 35 days after consent expiry or withdrawal, whichever is later, to demonstrate consent and prevent withdrawn data being restored inadvertently. This limited accountability processing is based on our legitimate interests in demonstrating and enforcing your choice.

Use Manage Cookies in the footer to change your choices. Withdrawal immediately stops optional collection and requests deletion of the linked recordings and detailed gameplay/performance events. A failed deletion request is retained in necessary browser storage and retried when you return or reconnect. If a message says the request could not finish, retry or contact us before clearing browser storage. Data processed lawfully before withdrawal remains lawfully processed; this does not permit continuing consent-only storage after withdrawal.

6. Contact and issue reports

Contact submissions contain the name, email address and message you provide and are retained for up to 365 days. Issue reports contain your description and diagnostic information shown in the form, including the game page, language, theme, viewport and browser information, and are retained for up to 180 days. New submissions do not store an IP address in these tables. Please avoid sensitive personal information. We use submissions to respond, fix problems and maintain the service, based on our legitimate interests; pre-contract enquiries may also be processed to take steps you request before a contract.

Forms are voluntary. We need the contact fields to handle your enquiry; you can continue playing without submitting them. Contact messages and issue notifications are delivered to our operator by email. Delivery records are kept for up to 30 days after delivery. Mailbox copies and any necessary follow-up records are subject to the same support retention purposes and rights requests.

7. Hosting, delivery and international transfers

Hostinger provides our hosting and database infrastructure. Bunny.net (BunnyWay d.o.o., Slovenia) delivers the website and supplies country metadata. Our operator uses Proton email services (Proton AG, Switzerland) for notifications and correspondence. Providers may use subprocessors and infrastructure in other countries. We do not send visitor IP addresses to an external geolocation API.

For transfers outside the EEA, safeguards depend on the recipient and destination: an applicable European Commission adequacy decision, or Standard Contractual Clauses and required supplementary measures. Switzerland has an EU adequacy decision. Hostinger and Proton publish data processing terms with transfer provisions; Bunny provides a data processing agreement through its account process. Contact privacy@freesolitaire.gg for the safeguards applicable to your data and a copy, subject to necessary redaction. We do not sell personal data.

8. Regional promotions

We use Bunny's country signal to decide whether an affiliate link may be shown, based on our legitimate interest in complying with regional restrictions. If the location or a required region is uncertain, the link is hidden. A plain affiliate link does not set advertising cookies on this site. If you follow it, the partner's own privacy notice applies to the visit and any registration.

9. Your rights

Subject to the GDPR's conditions, you can request access, correction, erasure, restriction of processing and portability, and object to processing based on legitimate interests. You can withdraw consent at any time. We do not make solely automated decisions with legal or similarly significant effects about you.

Send requests to privacy@freesolitaire.gg or our postal address. Give enough information for us to locate the data; we may ask for proportionate verification to protect it. We normally respond within one month. Where legally permitted, we may extend by up to two further months and explain why within the first month. Requests are normally free. You need not create an account or provide identity documents merely to play.

You may complain to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czechia, at uoou.gov.cz, or another competent EU/EEA supervisory authority. You do not have to contact us first.

10. Children

The optional analytics and recording features are intended for people aged 16 or over. This is our audience policy; the Czech threshold for a child's own consent to information-society services is 15. Other countries may apply different rules. We do not knowingly collect optional data from children below the applicable age. If this has happened, contact us to arrange deletion. Playing without optional collection remains possible.

11. Backups and changes

Restricted disaster-recovery backups can retain data beyond deletion from active systems until the backup rotates. They are not used for ordinary analytics or support. Any restoration must reapply deletion and retention decisions before the restored data is used. Contact us for the backup handling relevant to a request.

We update this notice when processing changes and request a new optional choice when its scope changes. Localized consent and form summaries explain the collection at the point of use; this full notice is maintained in English. Contact us if you need help understanding it in your language.