Privacy Policy

Effective October 20, 2026 (earlier versions: October 14, October 12, October 11, October 10 and October 9, 2026)

This policy covers our browser games Moonsling (moonsling.io) and Bonkzone (bonkzone.io), and the versions of them on Playgama (section 7). Both are made by Halo Dot Inc. ("we", "us"). It explains what information the games use, why, and what we keep. It's written for players and parents, so we've kept it as plain as we can.

1. Who we are

Halo Dot Inc. is the only company that operates these games.

2. What information the games use

When you play online

Information	Why	How long we keep it
Player name you pick (a random one is filled in for you)	Shown above your pet and on the leaderboard to the other players in your arena	Only while you're in the match. Our server holds it in memory and forgets it when you leave.
Pet and style you choose, your level, and the looks you wear (hat, trail, knockout effect, name tag)	To draw your character and your level badge for everyone in the arena	Only while you're in the match
Your controls (steering direction and button presses), your screen size, and timing checks	To move your pet, decide what you can see, and measure your connection speed	Only while you're in the match
In a friend lobby (on our websites): the lobby code, your player name, pet and level, and the chat messages, emotes and pings you send	To put friends in the same lobby and arena, and to show your messages to the people in your lobby	Only while the lobby exists. Our server holds the last 50 chat lines in memory so people who join a little later can see them, and forgets everything when the lobby closes. Chat is never written to disk or into logs.
IP address and basic browser information that every web request includes	To deliver the game to your device, and to keep the service working and secure	Our game server doesn't write it down. Our hosting provider's standard logs may record it for a short time (no more than 30 days).

Names are checked by a filter that blocks rude words. Please don't use your real name, or anyone else's, as your player name.

Chat in friend lobbies is not filtered. Anyone in a lobby can mute another player for themselves, and the player who made the lobby (the host) can turn chat off or remove people. Please never share real names, addresses, phone numbers, schools or other personal details in chat.

Saved on your device, not by us

The game saves a small profile in your browser's local storage so your progress is still there next time. It includes a random ID that is never sent to us, your player name, pet, style, XP and level, the level rewards and pet mastery you've earned, skill challenge progress and your pinned cosmetic reward, your stats (games played, knockouts, assists, times knocked out, time survived, best scores and ranks), a list of your last 20 rounds, your coins, the styles and shop items you own and wear, and the day you last used the daily spin. It also remembers your sound settings and the last "what's new" note you saw, and whether you finished the optional introduction. If a sign-in screen asks for your birthday (it isn't switched on yet), the game saves only which age group you're in (under 13, or 13 and over). Your birthday itself is never saved or sent anywhere. Until you close the tab, the game also remembers which way you turned the screen on a phone and which friend lobby you're in, so a reload puts you back.

This information stays on your device and is never sent to our servers. (The only exception is the date the game was first opened on this device, sent as part of the anonymous counts below, without any ID.) It also notes the day it first opened and how many visits it has had, for those counts. You can delete all of it at any time by clearing this site's data in your browser settings.

Anonymous counts

To learn whether the games are fun (do new players finish a second round? come back the next day? which hats do people actually wear?), the game sends our server small anonymous notes about what happens, such as: the game was opened, a round finished and how many knockouts it had, the shop was opened, an item was bought or put on, a set or event goal was completed. With them it sends the version of the game, which website it's running on (ours, or a game site like itch.io), and, once a day, the date the game was first opened on this device and how many days ago that was.

These notes never include an ID, account, player name, chat, or anything that could identify you, and our server doesn't link them to your IP address. It only adds them to daily totals (for example "Disco Hat bought: 12 times on October 14") and throws the notes away. The date of your first visit is stored on your device as part of the game's saved data and is never sent as an ID. The versions of the game that play offline only, and the versions on Playgama (which has its own statistics, see section 7), don't send these notes.

When you email us

If you write to us, we get your email address and whatever you put in your message. We use it only to reply. See section 8 for how long we keep it.

Moonsling gameplay counts

On moonsling.io, we use a random ID saved in your browser to estimate daily and weekly players, returning players, and how many people are playing at once. Player counts now include online matches only. Practice, menus, tutorials, local builds and marked testing browsers are excluded. Older saved practice records remain privately until their retention period ends, but are excluded from the dashboard. We also estimate time spent playing from periodic presence checks, count play visits after at least 30 minutes away, and keep anonymous totals of the Eastern hours when visits start. A last-play time rounded to the minute helps avoid counting a reconnect as another visit; it expires with the hashed history. The menu and tutorial are excluded. Offline files and third-party portal practice versions do not report to this system. A browser used for testing can set a first-party testing flag and cookie; if it already has a random ID, we keep its hashed exclusion marker for up to 90 days so its retained history can be hidden from reports without being deleted. This exclusion can be reversed.

Our server stores a salted hash of the random ID, never the original ID. We keep this history for 90 days. It is used only to understand use of our own game, not to advertise, identify, contact, or build behavioral profiles about players. We never save names, IP addresses, chat, location or button presses in this history. A browser is an estimate of a player: clearing storage or using another device may count again.

Browsers that deny storage, send Do Not Track or Global Privacy Control, or choose to stop below are not identified in unique-player counts. Online connections still contribute to aggregate live counts and unidentified connection totals. Bonkzone does not use this gameplay history system.

Stop anonymous gameplay counts

Stopping removes the browser ID and requests deletion of its retained hashed history, including its recorded play time, visits and last-play time. Historical anonymous aggregate hourly and peak counts may remain. Displayed hourly visit counts associated with that browser are removed along with its hashed history. This does not erase game progress. If you clear browser storage before requesting deletion, we cannot match the old random ID; its history expires within 90 days.

What we don't collect

Pageview totals on Moonsling. We also count new loads of our public website pages, including the lobby and player guides. Switching from the lobby to practice does not itself add a pageview. This is separate from online-player and play-visit counts. We save only a daily total for 90 days. The pageview counter creates no browser identity, writes no cookies or browser storage, and sends nothing to another analytics company. A random code for each page load is kept briefly in server memory to avoid duplicate requests, then discarded. Network addresses are used briefly in memory to limit request abuse and are not saved in these totals. Marked tests, known automated browsers, analytics opt-outs and Do Not Track or Global Privacy Control signals are excluded. Blocked scripts and failed requests can leave views uncounted. Returning to a cached page with the back button does not add a new page load. Earlier unmeasured dates are unavailable, not zero.

On our websites we don't use advertising cookies, cross-site tracking, or social media plugins. Our first-party gameplay counts and anonymous daily totals are explained above. The games there don't load anything from other companies, and our fonts and pictures come from our own website. There are no accounts yet, so there's nothing to sign in to. We don't collect precise location, photos, contacts or voice. (The versions on Playgama are different: see section 7.)

3. How we use information

We use the information above only to:

• run the game: put you in an arena, move your pet, and show names, pets and scores to the players in it;
• run friend lobbies: pass chat messages, emotes and pings to the people in your lobby;
• keep the game working and safe: stop flooding and cheating, filter names, and fix problems;
• understand aggregate use of Moonsling through the first-party gameplay counts explained above;
• reply to you if you contact us.

We don't build profiles about players, show ads, or use information to contact players. IP addresses and similar identifiers are used only for the internal operations listed above.

4. Who else handles information

We don't sell, rent or trade information about players. A few companies help us run the games and handle information only on our behalf:

• Railway (Railway Corporation) hosts our game servers. Your connection to the game goes through it.
• Cloudflare provides our domain names and DNS. It also runs the forwarding from addresses like www.moonsling.io and bonkzone.com, and forwards email sent to our @moonsling.io addresses.

Other players in your arena can see your player name, pet, style, level and score. People in your friend lobby also see the chat messages and emotes you send. We may also share information if the law requires it, or to protect players' safety.

5. Kids and parents

Lots of kids play our games, and we built them so kids can play without giving us personal information. There's no sign-up, no ads on our websites right now, and no email collection.

• Our game servers use the IP address every internet connection needs, and Moonsling uses the random browser ID described above for gameplay counts. We use these only for the internal operations described in section 3, never for advertising, behavioral profiles, or contacting anyone.
• Player names start out random and are filtered. We ask players not to use real names.
• Friend lobbies on our websites have text chat that any player in the lobby can use, children included. It isn't word-filtered. Messages go only to the people in that lobby and are never stored; the host can turn chat off, and anyone can mute another player. Please talk with your child about never sharing personal details in chat.
• If a child emails us, we use the email address only to reply once, and then delete it.
• Before we add features that collect personal information from children, such as accounts, we will update this policy and get verifiable parental consent wherever the law requires it.

Parents: we don't keep names, chat, or game progress in a server database. Moonsling's hashed gameplay history can be removed using the choice above in the same browser that played. Your child's progress lives only on their device (on Playgama, with Playgama), and you can remove it by clearing the site's data in the browser. Questions? Contact us using the details in section 1, and we'll help.

6. Ads

Ads help keep both games free. Everything in the games can be played without ever watching an ad.

• Only when they're turned on. This section is about our own websites. Ads appear there only when we have turned them on. When they're off, the games don't load any ad code. (On Playgama, Playgama shows the ads: see section 7.)
• Google may show the ads. When ads are on, the game loads Google's ad service for games (Google AdSense) from Google's servers. Like any website, Google then receives your device's IP address and basic browser information so it can deliver an ad. You can read how Google uses information from websites that use its services at policies.google.com/technologies/partner-sites.
• Child-directed and non-personalized, for every player. We don't know how old our players are, so we treat everyone as a child. Every ad request asks Google for non-personalized ads and is marked as directed to children. That means no behavioral advertising: ads are never chosen from what you do on other websites or apps, and we don't build advertising profiles.
• Video rewards are optional. Some buttons offer a reward, like double coins for a round, an extra daily spin, or trying a style for one round, if you choose to watch a short video. You never have to. A short ad may also appear between rounds, at most once every few minutes and never during a match.
• Nothing to buy. Coins, spins and rewards can't be bought with money. Coins only come from playing, the free daily spin and the optional videos, and they only unlock looks, never anything that helps you win.

7. Playing on Playgama and other websites

Moonsling is also on Playgama (playgama.com) and on the game sites and apps Playgama shares it with. There are two versions: Moonsling, which plays online against other players, and Moonsling Solo, which plays against computer-controlled pets. They're the same game, with these differences:

• Playgama's code runs inside the game. Playgama's software kit (its "Bridge") saves your progress, the same profile described in section 2, using Playgama's storage instead of our website's. Depending on the site, that can be your browser's storage or Playgama's cloud saves. Playgama may also keep its own identifier for you there.
• Playgama shows the ads there, not us. You'll see the same optional reward videos (double coins, an extra spin, trying a style for one round) and a short break between rounds, at most once every few minutes and never during a match. Playgama and its advertising partners choose and deliver those ads.
• We send Playgama a few game events through its kit, so we can see how the game plays and runs: when a round starts and ends, whether it was online or practice, roughly where you finished (1st, 2nd to 3rd, 4th to 10th, or lower), how many knockouts you got that round, the level you reach when you level up, and how smoothly the game runs (frame rates, frame times and the game's version number). We never send your player name, chat messages or any ID of ours.
• Playgama also records its own information, such as when you play and which ads are shown. Playgama is run by LeadToChanges L.L.C-FZ, and its privacy policy, at playgama.com/confidential, covers everything Playgama collects.
• Our server. The online version still connects to our game server, which handles your player name, pet, controls and IP address exactly as described in sections 2 to 4. Friend lobbies and chat aren't part of the Playgama versions. Moonsling Solo doesn't connect to our servers at all.

Our games may also appear on other game websites and apps. When you play there, that company's own privacy policy covers what it collects, such as its ads or accounts. This policy covers our own websites, moonsling.io and bonkzone.io, and what our game servers do.

8. How long we keep information

• Match information (name, pet, style, controls): only while you're connected. Nothing goes into a database.
• Friend lobbies and chat: only while the lobby exists (the last 50 chat lines are held in memory), then forgotten. Never written to disk or logs.
• Moonsling gameplay counts and hashed browser IDs: retained for 90 days, then removed. The browser ID on your device remains until you stop gameplay counts or clear site data.
• Hosting logs that may include IP addresses: kept by our hosting provider for no more than 30 days, then deleted.
• Emails to us: deleted within 90 days after the question is answered. Emails from a child are deleted right after we reply.
• Anonymous counts: kept as daily totals (no individual notes) for up to 2 years so we can compare seasons.
• Data on your device: stays until you clear it. We can't see it or delete it for you. On Playgama, your saved progress is kept by Playgama under its policy.

9. Keeping information safe

The games use encrypted connections (HTTPS and secure WebSockets). Only Halo Dot Inc. can reach our server settings and logs. Our private server-status page is protected by a secret key, and it shows only player and arena counts, never names or addresses.

10. Your choices

• Play without giving any personal information. A random name works fine.
• Delete your saved progress at any time by clearing the site's data in your browser.
• In a friend lobby, mute anyone you don't want to hear from. If you're the host, you can turn chat off or remove people.
• Ask us any question about your information at privacy@moonsling.io.
• Do Not Track and Global Privacy Control: we don't track you across websites or sell or share information for advertising. These signals disable Moonsling browser identification for gameplay counts.

11. Changes to this policy

If we change this policy, we'll post the new version on this page and update the date at the top. If a change means collecting more information, such as when accounts arrive, we'll post it here before the change happens, and get parental consent wherever it's required.

12. Contact us

Email privacy@moonsling.io, call (201) 921-1836, or write to Halo Dot Inc., 2352 Linwood Ave, Apt 3E, Fort Lee, NJ 07024, USA.