Privacy Policy
Last updated: 25 October 2026.
SolitaireBay is a solitaire site that works without accounts. This policy explains what happens to information when you use it. It is written to meet the information duties of the Turkish Personal Data Protection Law (KVKK, article 10) and the EU and UK GDPR (article 13), in plain language.
Who is responsible
Operator: YBA Bilişim
Postal address: Kadıköy, Istanbul, Turkey
Email: contact@solitairebay.com
The operator is the data controller for the processing described here.
What is stored on your device
The game keeps its data in your browser’s local storage. The page writes it on your own device, and it is not sent to the operator. There are four kinds of entries:
sb.settingsholds your preferences, such as the theme, card size, left-hand layout and autoplay setting.sb.game.<variant>holds the progress of the current deal in one game: the deal’s code, the moves you made and the elapsed time. The code is the same one that appears in the page address. The game keeps one saved deal per game, and starting a new deal replaces it.sb.statsholds your counts of games played and won and your best times for each game. The settings screen can show these as a copyable code, and that code stays on your device unless you choose to paste it somewhere.sb.daily.streakholds your current daily-deal streak.
These entries stay until you delete them with your browser’s “clear site data” option, or until the game replaces an old saved deal. If your browser blocks local storage, the game still runs, and shows a notice that progress will not be saved.
SolitaireBay sets no cookies of its own. See the cookies page.
A deal link such as /spider/?d=… contains only the code of the deal. It carries no information about you.
Visitor statistics
The site uses Cloudflare Web Analytics to count visits and see which pages are read, from which countries, and with which kinds of browsers and devices, together with page load performance figures. The analytics service is cookieless: it does not set cookies and does not store identifiers in your browser.
The reason for this processing is to keep the site working and to understand which pages are useful. The legal basis is the operator’s legitimate interest (GDPR article 6(1)(f); KVKK article 5(2)(f)), which is limited to aggregate figures.
Hosting and server data
The site is delivered by Cloudflare. Like any web host, it handles technical connection data such as your IP address and the pages requested, in order to deliver the pages and protect against attacks. The legal basis is the legitimate interest in delivering a secure site (GDPR article 6(1)(f); KVKK article 5(2)(f)). The operator does not use this information to identify visitors. Cloudflare keeps this data under its own retention rules.
If you write to contact@solitairebay.com, the operator receives your email address and whatever you put in the message. It is used to reply and to keep a record of the exchange. The legal basis is the operator’s legitimate interest in answering and keeping a record of requests (GDPR article 6(1)(f); KVKK article 5(2)(f)). Email is received through a forwarding service and delivered to the operator’s mailbox. The site collects no email addresses in any other way.
Method of collection: personal data reaches the operator automatically through the website and its hosting, and electronically when you send an email.
Who receives data
Cloudflare, as the hosting and analytics provider, and the email provider that holds the operator’s mailbox. The operator does not sell personal data.
International transfers
Cloudflare operates globally, so connection data may be processed outside your country, including in the United States. For visitors in the EU and UK, Cloudflare relies on the EU-US Data Privacy Framework and standard contractual clauses (GDPR chapter V). Transfers of data of visitors in Turkey follow KVKK article 9.
Retention
Data on your device lasts until you delete it. Emails are kept for 2 years after the last message, so that repeat reports and privacy requests can be handled and shown to have been handled, then deleted. You can ask for earlier deletion. Visitor statistics and server data are retained by Cloudflare under its own policies.
Your rights
You can ask the operator to confirm whether personal data about you is processed, to provide a copy, to correct or delete it, to restrict or object to its processing, and, where it applies, to receive it in a portable format (GDPR articles 15 to 21; KVKK article 11). Because the game does not know who you are, requests will usually concern your emails. To exercise a right, write to contact@solitairebay.com. Requests are answered within 30 days, free of charge (KVKK article 13). You may also complain to your data protection authority, such as the Turkish Personal Data Protection Board (KVKK Kurulu) or the supervisory authority where you live.
Age
SolitaireBay is a general audience site. It is not directed to children under 13, and it does not knowingly collect personal data from them.
Changes to this policy
When this policy changes, the date at the top changes too. The terms and about pages give more background on the site.