Privacy policy

This site asks you for nothing. There are no forms, no accounts, no newsletter, and no comments, and today it sets no cookies. The games run entirely in your browser, and nothing about how you play is ever sent anywhere. There is no analytics of any kind. The only personal information involved is the technical minimum needed to deliver the page to you, and whatever you choose to write if you send an email.

The operator of this site lives in Mexico and the site's readers are in the United States. Two sets of rules therefore apply at the same time, and this page has two clearly separated parts:

• Part A: information for readers in the United States: what is handled, why, who receives it, how long it is kept, and what you can ask for. It is written to the standard of the state privacy laws that may apply to you and of the federal rules on children's online privacy.
• Part B: the privacy notice required by Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, which binds the operator because of the operator's residence.

Both parts describe the same handling of information, which is minimal, each in the vocabulary its own law uses. If something in one part appears to contradict the other, it is a drafting error: tell me at hello@solocardgames.com.

Part A: information for readers in the United States

A.1. Who is accountable

Accountable for the personal information described here

Sergio Padilla, a natural person resident in Mexico, owner of the domain solocardgames.com and of the site published on it.

Contact

hello@solocardgames.com. This is the address for exercising your rights and for any question about this policy.

Person in charge of the protection of personal information

Editor of Solo Card Games, reachable at hello@solocardgames.com. The position is published here by title; the person holding it is the operator named above.

Establishment in the United States

None. The site is operated from Mexico for readers in the United States.

A.2. What is handled, why, and on what consent

Only two things are actually handled: delivering the page to you, and reading an email if you send one. Two more headings follow them because readers reasonably expect them, and in both cases the honest answer is that there is nothing there.

A.2.1. Delivering the page: technical connection data

What: for your browser to receive this page, the infrastructure of Cloudflare, Inc. necessarily processes your IP address and the technical data of the request (date and time, the address requested, the type and version of browser and operating system, the response code, and the volume of data transferred).

Why: to deliver the content you asked for, to protect the site against attacks and abuse, and to keep it available and secure.

Consent: implied. Handling this minimum is unavoidable in any communication over the internet, it is what you are asking for when you open the page, and a reasonable person would consider it appropriate for that purpose. These records are not combined with any other information, are not used to build a profile, and are not used to identify anyone.

Who handles it: Cloudflare, Inc., as a service provider acting for the operator under its own data processing terms. On the free plan this site uses, the operator has no access to the raw server logs and cannot download them. The provider's control panel does show traffic and security information, which can include the IP address of individual requests; that information is not used to identify anyone, is not exported, and is not combined with anything else.

A.2.2. Analytics: there is none

As of October 1, 2026 this site has no analytics of any kind. There is no audience measurement, neither the operator's own nor a third party's. Nothing counts how many visits a page receives, where they come from, or which browser they use. Under this heading there is no handling of personal information at all.

That follows from a promise you can check yourself: the site makes no request to any outside domain. Open your browser's developer tools, go to the network tab and reload the page: everything that downloads comes from solocardgames.com. The Content Security Policy the site is served with would block an external script even if one were added by mistake.

A.2.3. If you send an email

What: your email address, your name if you include it, and whatever you decide to tell me in the message. Nothing is asked of you and nothing needs to be provided: to report a problem with a deal, I do not need to know who you are.

Please do not send information that is not needed. In particular, I do not need and do not want your Social Security number, your bank or card details, or any document about your health or your household. If something like that arrives, it is deleted as soon as I see it and I tell you so. This site does not handle sensitive information.

Why: to read your message and reply to it; and if it is a report of a problem with a game or a deal, to check it and fix the site.

Consent: express. You provide the information knowingly when you write, for the purpose of getting an answer. You may withdraw that consent at any time by asking me to delete the exchange. Anything in the message that was not needed is deleted.

Who handles it: the address hello@solocardgames.com is not a mailbox of its own. It is a Cloudflare Email Routing address that forwards the message to a personal mailbox hosted by Google (Gmail). Both Cloudflare and Google handle the message in transit and at rest as service providers. Replies are sent from that same mailbox, so Google also delivers them.

A.2.4. The games: nothing is sent anywhere

Every hand you play, every choice you make and every result is processed entirely inside your browser and never leaves it. It is not sent to any server, it is not saved in any system of the operator, it is not shared with anyone and it does not travel in the page's address. The operator does not see it, does not receive it, and cannot recover it. The computer players run on your device too.

This is possible because the whole game is inside the page when it downloads, so it has nothing to look up while you play. You can check it: disconnect your device from the network after the page has loaded and the game keeps working.

The site does keep a few things on your own device, in your browser's local storage: your table settings, a game in progress so you can resume it, and your statistics for each game. They stay on your device, nobody else can read them, no identifier is generated for you, and they are under your control: the cookie and browser storage page lists exactly what is kept and how to clear it.

A.2.5. What this site does not do

• There are no contact forms, registration forms, subscription forms, or comment forms.
• There is no newsletter and no commercial message of any kind is sent.
• There are no social media buttons, no embedded content, no maps, and no third-party video.
• No external web fonts and no resources from any outside content delivery network are loaded. A page of this site makes no request at all to a third-party domain.
• There are no accounts, no leaderboards, and no way to play against other people, so no information about you is shown to anyone.
• No profiles are built and no automated decisions are made about anyone.
• Personal information is never bought, rented, or sold, and it is not disclosed to anyone for a commercial purpose.

A.3. Who receives the information

No personal information is disclosed to anyone except the service providers the site needs to work, and except where the law requires it. The table separates two roles that are not the same: a service provider acts for the operator and on the operator's instructions, while an independent controller decides for itself what it does with the information and answers for it to you directly.

Information may also be disclosed to a public authority or a court where the law requires it.

A.4. Advertising, which comes later

As of October 1, 2026 this site shows no advertising, loads no file from Google or from any other network, and earns nothing.

The declared intention is to carry Google AdSense advertising when the site meets the requirements of the program, using the account the operator already holds. When that happens, and before any advertising tag is loaded:

• This policy and the cookie and browser storage page are updated with the actual handling, the recipients and the specific cookies and identifiers, and with the date of the change.
• Google acts as an independent controller of what it collects through its own tags. It decides the purposes and the means of that handling and answers for it under its own policies, which are published on its own site.
• A choice screen is shown before anything is loaded. Declining takes exactly one click, and declining leaves the whole site working. Where a state law gives you the right to opt out of targeted advertising, the same choice is offered from a permanent link.

Until then, everything on this page about advertising describes the future, not the present, and it is written that way on purpose.

A.5. Handling outside your country

Personal information connected with this site is handled partly outside the United States, and that is stated plainly here.

• United States: Cloudflare, Inc. delivers the site and forwards its email. Cloudflare's network answers each request from the point of presence closest to the visitor.
• Google mailbox: the messages forwarded from hello@solocardgames.com are stored in a personal mailbox hosted by Google, from which the replies are also sent.
• Mexico: the operator reads and answers that mail from Mexico, which is where he lives. This concerns only the content of the message you decide to send. Nothing else about you travels to Mexico, because nothing else is collected.

If you would rather not have your information handled outside the United States, the way to achieve that is simple: play and read the site without writing to it. Doing so still involves the technical connection data described in A.2.1, which no website can avoid.

A.6. How long information is kept

Technical connection data

Kept by Cloudflare according to the periods described in its own documentation. The operator does not hold these records and can neither extend nor shorten their retention.

Analytics data

None: there is no analytics. If any is ever activated, the retention period of the service is stated here first.

Email

Kept while the exchange lasts and while it is useful for following the matter up. As a general rule it is deleted about a year after the last message, unless the law requires it to be kept longer or it is needed to document a correction made to the site, in which case only the note of the correction is kept, without your personal information.

What the games keep in your browser

Nothing reaches any system of the operator. It stays on your device until you clear it, and you can clear it at any time (see the cookie and browser storage page).

A.7. Your rights

• Access: to be told whether any personal information about you is held, what it is used for and to whom it has been disclosed, and to receive a copy of it.
• Correction: to have inaccurate or incomplete information corrected.
• Deletion: to have information about you deleted.
• Withdrawal of consent: to withdraw your consent at any time. In practice, this means asking for an email exchange to be deleted.
• No sale, no targeted advertising, no profiling: none of these is done today, so there is nothing to opt out of. You will not be treated differently for asking about your information.

The privacy law of your state may give you more than this list, and the same address serves for those requests as well.

How to exercise them: write to hello@solocardgames.com saying what you want. There is no form and no procedure to follow first. A reply is sent within 30 days of receiving the request, and there is no charge.

One practical consequence of how this site is built: since nothing is collected, in all likelihood there is no information about you to access, correct, or delete, unless you have written to me. If that is the case, I will tell you so in those words.

A.7.1. Complaining to an authority

You may complain to the operator first, and I would welcome the chance to fix the problem. You are not required to. If you believe your personal information has not been handled in accordance with the law, you may complain to the attorney general of your state or to the Federal Trade Commission, at www.ftc.gov. Each of those bodies publishes on its own website how to file a complaint, and none of them charges for it.

A.8. Children

Solo Card Games is a general audience site. It is not directed to children under 13, and it does not knowingly collect personal information from them; indeed, it collects none from anyone, because it has no forms, no accounts, and no analytics. If you are under 13, please do not send personal information by email; ask a parent or guardian to write instead. If a parent or guardian believes a child has sent information, write to hello@solocardgames.com and it will be deleted.

A.9. Security

The site is served over HTTPS with a valid certificate, and the network provider is configured to redirect any unencrypted connection to HTTPS. This is a static site: there is no database, no administration panel reachable from the internet, no user accounts, and no store of personal information that could be breached, quite simply because none exists. Security headers restrict what the page may load and run.

A.10. Changes to this policy

This policy is updated whenever the handling of information changes, and in particular before advertising is activated. The date of the last update is at the top of the page, and substantial changes are flagged visibly for a reasonable time.

Part B: privacy notice (Mexico)

This part is the privacy notice required by Mexican data protection law, which applies to the operator because of the operator's residence. It is written with the terminology of that law and kept in English, because that is the language of this site. If you are in the United States, the information addressed to you is Part A; both parts describe the same handling.

This comprehensive privacy notice is issued under the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) published in the Official Gazette of the Federation on March 20, 2025, and in force since March 21, 2025, together with the provisions that develop it. The powers formerly held by the National Institute for Transparency, Access to Information and Personal Data Protection were transferred to the Secretaría Anticorrupción y Buen Gobierno, which is the competent authority in this field.

B.1. Identity and domicile of the responsible party

Responsible party: Sergio Padilla, a natural person resident in Mexico, owner of the website solocardgames.com.

Domicile: Avenida Adolfo López Mateos 424A, Colonia Campestre, C.P. 77030, Chetumal, Quintana Roo, Mexico (address for receiving notices).

Email address for personal data matters: hello@solocardgames.com.

B.2. Personal data collected

The site has no forms and no other mechanism for capturing data. The only personal data that reach the responsible party are:

• Identification and contact data that the data subject provides voluntarily by sending an email: the email address, the name if given, and any information the sender decides to include in the message.
• Technical browsing data processed by the infrastructure provider to deliver and protect the page: IP address, date and time of the request, the address requested, and the type of browser and operating system. The responsible party has no access to these raw records.
• Audience data: none. The site has no analytics today. If any is added in the future, it would be an aggregate measurement, without cookies and without persistent identifiers, that does not allow any person to be identified, and it would be stated in this notice before being activated.

No sensitive personal data are collected, whether about health, ethnic origin, beliefs, union membership, sexual preferences, or anything analogous, and no financial or asset data are collected. Data subjects are expressly asked not to send sensitive data by email; if such data arrive, they are deleted.

What is done in the games is never collected: the hands, the choices, the settings, the saved games and the statistics are processed and kept in the data subject's own browser, they are not transmitted, and the responsible party has no access to them.

B.3. Purposes of the processing

Primary purposes, necessary for the relationship with the data subject:

1. To receive, follow up on, and answer the communications the data subject sends by email.
2. To check and, where appropriate, correct the site when a data subject reports a problem with a game or a deal.
3. To deliver the content of the site, keep it available and protect it against abuse and attack.
4. To comply with the legal obligations applicable to the responsible party.

Secondary purposes, not necessary for that relationship:

1. To produce aggregate statistics of site use, to improve its content and its performance. This purpose is not being carried out today, because the site has no analytics. If it is activated, it will use aggregate information without identifiers only, and it will be stated in this notice beforehand.

If you do not wish your data to be processed for the secondary purpose, you may say so by writing to hello@solocardgames.com. Your refusal will not be a reason to deny you the services of the site, which are free and open to everyone in any case.

No advertising mailings, marketing, commercial prospecting, profiling, or automated decision-making about data subjects are carried out.

B.4. ARCO rights

As the owner of the personal data, you have the right to know what data about you are held and what they are used for (Access), to ask for them to be corrected when they are out of date, inaccurate, or incomplete (Rectification), to ask for them to be removed from the records when you consider that they are not being used in accordance with the principles, duties, and obligations of the law (Cancellation), and to object to the use of your personal data for specific purposes (Opposition).

How to exercise them: by a request sent to hello@solocardgames.com, which must contain:

1. The name of the data subject and an address or other means of communicating the answer.
2. The documents that prove the identity of the data subject or, where applicable, the legal representation.
3. A clear and precise description of the personal data in respect of which one of the ARCO rights is being exercised.
4. Any other element or document that makes it easier to locate the personal data.
5. In the case of a rectification, the changes to be made and the documents that support the request.

Time limits: the answer is communicated within a maximum of 20 business days from receipt of the request, and if the request is well founded it is given effect within the 15 business days following that communication. Exercising ARCO rights is free of charge; only justified costs of postage or of reproduction in copies or other formats may be charged.

Since the site collects data by no other means, in most cases the answer will be that no personal data of the applicant are held by the responsible party, other than the correspondence the data subject has sent.

B.5. Revocation of consent

You may revoke at any time the consent you have given for the processing of your personal data, by writing to hello@solocardgames.com and saying that you wish to revoke it. The request is dealt with within the same time limits as in B.4, and the deletion is confirmed to you.

Revocation has no retroactive effect on processing already carried out in accordance with the law, and it may not be possible in the cases in which the law itself requires the data to be kept.

B.6. Limiting the use and disclosure of your data

You may limit the use or disclosure of your personal data by the same means. Since the responsible party carries out no marketing, direct advertising, or commercial prospecting, no exclusion list is necessary; if one were ever created, it would be stated in this notice before it came into operation.

B.7. Transfers of personal data

The responsible party does not sell, assign, or transfer personal data to third parties for commercial purposes, and no consent is required for any transfer other than those listed below, which are disclosures to processors acting for and on the instructions of the responsible party:

• Cloudflare, Inc. (United States), which provides hosting, the content delivery network, DNS, domain registration, and email forwarding.
• Google, provider of the personal mailbox to which the messages addressed to hello@solocardgames.com are forwarded and from which the replies are sent.

The transfers provided for in the law may also be carried out without consent, among them those required by a decision of a competent authority or to comply with a legal obligation.

If advertising is added to the site in the future, the participation of the advertising network will be stated expressly in this notice before it comes into operation, together with the corresponding consent mechanism.

B.8. Use of cookies and tracking technologies

As of October 1, 2026 the site uses no cookies and no tracking or persistent identification technology. It keeps settings, saved games, and statistics in the browser's local storage on your own device, as described in the cookie and browser storage page; none of it is transmitted.

B.9. Changes to this privacy notice

This privacy notice may be amended because of changes in the applicable legislation, in the privacy practices of the responsible party, or in how the site works. Amendments are published on this same page, which is the means made available to data subjects for that purpose, with the date of the last update at the top. You are encouraged to consult it from time to time.

B.10. Competent authority

If you consider that your right to the protection of personal data has been infringed by any conduct of the responsible party, or you suspect a breach of the provisions of the law, you may file the corresponding complaint or request for protection of rights with the Secretaría Anticorrupción y Buen Gobierno, which took over the personal data protection powers of the former National Institute for Transparency, Access to Information and Personal Data Protection. Information about the procedure and how to file is available through that Secretariat's official channels.