Privacy Policy

1.Who is responsible

Classic Solitaire is an independent game developed and published by Heapboxing (“we”, “us”), who is the data controller for the limited processing described in this policy.

Privacy questions and requests can be sent to baisangr@yahoo.com. See Contact.

2.What the game stores

The game keeps only the data needed to remember how you like to play and how you have done so far. Nothing else is written, and nothing is sent anywhere.

Where exactly it is written

• Web: your browser's localStorage, under the keys solitaire.settings and solitaire.stats. If storage is blocked (private browsing, some embedded webviews), the game still runs and simply does not remember anything between sessions.
• Facebook Instant Games: through Meta's player-data API (FBInstant.player.setDataAsync), which associates the two records with your Facebook account inside the Instant Games platform.
• YouTube Playables: through Google's Playables save API (ytgame.game.saveData), as a single JSON record tied to your Playables profile.

These records contain no name, no identifier and no free text — only a few numbers, booleans and colour names. We cannot read them from our side, and we hold no copy.

How to delete it

• In the game: open the settings panel and press Reset (twice, to confirm). This erases your statistics. Your settings are reset by changing them back, or by clearing the game's saved data as described next.
• Web: clear site data for the game's address in your browser settings.
• Facebook Instant Games: remove the game's data through your Facebook settings, or contact us and we will explain which platform control applies.
• YouTube Playables: clear the game's saved data through your YouTube or Google account controls.

Uninstalling or clearing the game's data is permanent: your statistics cannot be recovered afterwards, because no copy exists anywhere else.

3.What the game does not collect

For clarity, the game does not do any of the following:

• No account creation, sign-in, password or email address.
• No personal details: no name, age, gender, photo, contacts, calendar or files.
• No precise or approximate location; no IP-address logging by us; no device or advertising identifiers.
• No analytics, telemetry, crash reports, heatmaps, A/B tests or session recording.
• No advertising, ad identifiers, in-app purchases or payment data.
• No social features: no friend lists, chat, leaderboards or sharing of results.
• No contact with any server of ours. On the web build the game loads only its own HTML and script; there are no CDN, font, image or API requests.
• No profiling and no automated decision-making with legal or similar effects.

4.The platforms you play on

Classic Solitaire runs inside a host platform, and that host is a separate controller for the data it collects about you. Facebook (Meta) and YouTube (Google) may collect information such as your account identifier, device information, approximate location and gameplay or usage events, and may use cookies or similar technologies, under their own policies. We do not control that processing and receive no such data.

• Web: the site that hosts the game may keep its own server logs. That is the hosting provider's processing, not ours.
• Facebook Instant Games: see Meta's Privacy Policy.
• YouTube Playables: see Google's Privacy Policy.

The game asks these platforms for nothing beyond loading the SDK and reading or writing its own two save records — for example, it never requests your player ID or profile.

5.Cookies and similar technologies

The game sets no cookies. It uses your browser's localStorage on the web build for the settings and statistics described above, which is strictly functional storage and not used for tracking, advertising or analytics. Because it is not tracking-related, no consent banner is shown; you can still remove it at any time by clearing site data.

6.Why we process this data

Under the EU General Data Protection Regulation (GDPR), the small amount of data above is processed to provide the game you asked for — remembering your preferences and showing your own statistics — which rests on the performance of our agreement with you (Article 6(1)(b) GDPR) and, for strictly functional storage on your device, on the technical necessity of providing the service you requested.

We do not use the data for marketing, profiling or any other purpose, and we do not combine it with data from other sources.

7.How long it is kept

Until you delete it. The records stay in your browser or in the host platform's save slot for as long as you keep playing, and disappear when you use the in-game Reset control or clear the game's saved data. We keep no copy and run no server, so there is nothing for us to expire or archive.

8.Sharing and transfers

We do not sell, rent, trade or share personal information with anyone. There are no analytics providers, advertising networks, data brokers or third-party SDKs in the game beyond the host platform's own SDK, and the game makes no international transfer of data on our behalf.

If you play on Facebook Instant Games or YouTube Playables, your save data is stored by Meta or Google respectively, and their terms and international-transfer arrangements apply to that storage.

9.Your rights

Where the GDPR applies to you, you have the right to be informed, to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw any consent you have given. You also have the right to lodge a complaint with a supervisory authority.

Since we hold no data about you, most requests resolve immediately: the fastest way to exercise a right of access, correction, erasure or portability is to look at — or delete — the saved data on your own device or in the platform's save slot, as described under What the game stores. You are welcome to write to baisangr@yahoo.com as well, and we will confirm what we hold (normally nothing) within one month.

In Romania, the supervisory authority is the National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), www.dataprotection.ro. You may complain to it, or to the authority in your own country of residence.

10.Children

The game is a general-audience card game and is not directed at children under 13. It collects no personal data from anyone, so it collects none from children. Where the game is played inside Facebook Instant Games or YouTube Playables, the platform's own age requirements and parental controls apply to access.

11.Security

The strongest protection here is that there is nothing to breach: the game has no backend, no database and no account system, and transmits none of your data. The saved settings and statistics stay in storage controlled by your browser or by the host platform, and are protected by that browser's or platform's own security model. Remember that anyone with access to your device or account can see them.

12.Changes to this policy

If the game later adds a feature that changes how data is handled — for example ads, online leaderboards or cloud saves — this policy will be updated before that feature ships, and the effective date above will change. Material changes will be made visible where the game is published.

13.Contact