Privacy Policy
Effective October 6, 2026
This policy covers our browser games Moonsling (moonsling.io) and Bonkzone (bonkzone.io). Both are made by Halo Dot Inc. ("we", "us"). It explains what information the games use, why, and what we keep. It's written for players and parents, so we've kept it as plain as we can.
The short version
- You can play without signing up. We don't ask for your name, email, birthday or location.
- There are no ads right now (section 6 explains how they'd work), and no cookies, analytics, trackers or chat.
- Your level, stats and pet choice are saved only on your own device. We can't see them.
- While you play, our server uses your player name, pet, style and button presses to run the match. It forgets them when you leave. We don't store them.
- Like every website, our servers need your device's internet address (IP address) to send you the game. We use it only to run the game and keep it safe.
- We never sell or rent information about you.
1. Who we are
Halo Dot Inc.
2352 Linwood Ave, Apt 3E, Fort Lee, NJ 07024, USA
Phone: (201) 921-1836
Email: privacy@moonsling.io
Halo Dot Inc. is the only company that operates these games.
2. What information the games use
When you play online
| Information | Why | How long we keep it |
|---|---|---|
| Player name you pick (a random one is filled in for you) | Shown above your pet and on the leaderboard to the other players in your arena | Only while you're in the match. Our server holds it in memory and forgets it when you leave. |
| Pet and style you choose | To draw your character for everyone in the arena | Only while you're in the match |
| Your controls (steering direction and button presses), your screen size, and timing checks | To move your pet, decide what you can see, and measure your connection speed | Only while you're in the match |
| IP address and basic browser information that every web request includes | To deliver the game to your device, and to keep the service working and secure | Our game server doesn't write it down. Our hosting provider's standard logs may record it for a short time (no more than 30 days). |
Names are checked by a filter that blocks rude words. Please don't use your real name, or anyone else's, as your player name.
Saved on your device, not by us
The game saves a small profile in your browser's local storage so your progress is still there next time. It includes a random ID that is never sent to us, your player name, pet, style, XP and level, your stats (games played, knockouts, assists, times knocked out, time survived, best scores and ranks), a list of your last 20 rounds, and your coins, the styles you've unlocked and the day you last used the daily spin. If a sign-in screen asks for your birthday (it isn't switched on yet), the game saves only which age group you're in (under 13, or 13 and over). Your birthday itself is never saved or sent anywhere. If you choose "play upright anyway" on a phone, that choice is remembered until you close the tab.
This information stays on your device and is never sent to our servers. You can delete it at any time by clearing this site's data in your browser settings.
When you email us
If you write to us, we get your email address and whatever you put in your message. We use it only to reply. See section 8 for how long we keep it.
What we don't collect
We don't use cookies, advertising, analytics, social media plugins or tracking of any kind. The games don't load anything from other companies, and our fonts and pictures come from our own website. There are no accounts yet, so there's nothing to sign in to. There's no chat and no friend list. We don't collect precise location, photos, contacts or voice.
3. How we use information
We use the information above only to:
- run the game: put you in an arena, move your pet, and show names, pets and scores to the players in it;
- keep the game working and safe: stop flooding and cheating, filter names, and fix problems;
- reply to you if you contact us.
We don't build profiles about players, show ads, or use information to contact players. IP addresses and similar identifiers are used only for the internal operations listed above.
4. Who else handles information
We don't sell, rent or trade information about players. A few companies help us run the games and handle information only on our behalf:
- Railway (Railway Corporation) hosts our game servers. Your connection to the game goes through it.
- Cloudflare provides our domain names and DNS. It also runs the forwarding from addresses like www.moonsling.io and bonkzone.com, and forwards email sent to our @moonsling.io addresses.
Other players in your arena can see your player name, pet, style and score. We may also share information if the law requires it, or to protect players' safety.
5. Kids and parents
Lots of kids play our games, and we built them so kids can play without giving us personal information. There's no sign-up, no chat, no ads and no email collection.
- The only identifier we use is the IP address that every internet connection needs. We use it only for the internal operations described in section 3, and never for advertising, building profiles, or contacting anyone.
- Player names start out random and are filtered. We ask players not to use real names.
- If a child emails us, we use the email address only to reply once, and then delete it.
- Before we add features that collect personal information from children, such as accounts, we will update this policy and get verifiable parental consent wherever the law requires it.
Parents: we don't keep personal information about your child on our servers, so there's nothing stored with us to review or delete. Your child's progress lives only on their device, and you can remove it by clearing the site's data in the browser. Questions? Contact us using the details in section 1, and we'll help.
6. Ads
Ads help keep both games free. Everything in the games can be played without ever watching an ad.
- Only when they're turned on. Ads appear only when we have turned them on for our website. When they're off, the games don't load any ad code.
- Google may show the ads. When ads are on, the game loads Google's ad service for games (Google AdSense) from Google's servers. Like any website, Google then receives your device's IP address and basic browser information so it can deliver an ad. You can read how Google uses information from websites that use its services at policies.google.com/technologies/partner-sites.
- Child-directed and non-personalized, for every player. We don't know how old our players are, so we treat everyone as a child. Every ad request asks Google for non-personalized ads and is marked as directed to children. That means no behavioral advertising: ads are never chosen from what you do on other websites or apps, and we don't build advertising profiles.
- Video rewards are optional. Some buttons offer a reward, like double coins for a round, an extra daily spin, or trying a style for one round, if you choose to watch a short video. You never have to. A short ad may also appear between rounds, at most once every few minutes and never during a match.
- Nothing to buy. Coins, spins and rewards can't be bought with money. Coins only come from playing, the free daily spin and the optional videos, and they only unlock looks, never anything that helps you win.
7. Playing on other websites
Our games may also appear on game websites and apps run by other companies. When you play there, that company's own privacy policy covers what it collects, such as its ads or accounts. This policy covers our own websites, moonsling.io and bonkzone.io.
8. How long we keep information
- Match information (name, pet, style, controls): only while you're connected. Nothing goes into a database.
- Hosting logs that may include IP addresses: kept by our hosting provider for no more than 30 days, then deleted.
- Emails to us: deleted within 90 days after the question is answered. Emails from a child are deleted right after we reply.
- Data on your device: stays until you clear it. We can't see it or delete it for you.
9. Keeping information safe
The games use encrypted connections (HTTPS and secure WebSockets). Only Halo Dot Inc. can reach our server settings and logs. Our private server-status page is protected by a secret key, and it shows only player and arena counts, never names or addresses.
10. Your choices
- Play without giving any personal information. A random name works fine.
- Delete your saved progress at any time by clearing the site's data in your browser.
- Ask us any question about your information at privacy@moonsling.io.
- Do Not Track and Global Privacy Control: we don't track you across websites or sell or share information for advertising, so these signals don't change anything here. We honor them anyway.
11. Changes to this policy
If we change this policy, we'll post the new version on this page and update the date at the top. If a change means collecting more information, such as when accounts arrive, we'll post it here before the change happens, and get parental consent wherever it's required.
12. Contact us
Email privacy@moonsling.io, call (201) 921-1836, or write to Halo Dot Inc., 2352 Linwood Ave, Apt 3E, Fort Lee, NJ 07024, USA.