Privacy policy
Last updated
Castle Bonk is made by Bonneville Solutions, LLC (“we”, “us”), who is responsible for the data described here. Castle Bonk is a game for children and families, so we built it to collect as little as possible.
The short version
- We don't collect personal information from children. There's no account, no chat, and nowhere to type a name.
- The game and the pages children read load no third-party scripts, advertising pixels, or analytics.
- Progress is saved on your own device.
- Ads in the free version are contextual only, never personalized, and never inside the game.
- If a grown-up buys the Royal Charter, Paddle handles the payment. We receive the buyer's email so we can send the charter code.
- We never sell data or share it for advertising.
Information from children
We don't ask children for personal information, and the game has no way to enter it. Here is everything the game uses:
- Game progress (castle upgrades, days won, settings) is saved in your browser's storage on your device. It doesn't leave the device unless a grown-up turns on cloud backup with a Royal Charter.
- Leaderboards. If you submit a score, we store the score, the day and difficulty, a name made from our word lists (like “Brave Otter”), a crest, and a random ID created by the game on your device. There's no real name, photo, or location.
- Anonymous game totals, such as how many players finished day 5 or which day is hardest. They carry no user ID and no cookie. We use them to balance the game.
- Technical data. Like every website, our hosting provider (Cloudflare) processes your IP address and browser details to deliver and protect the site. We use this only to run the service, not to identify or profile anyone.
Under the U.S. Children's Online Privacy Protection Act (COPPA), the random game ID and technical data are used only to support the internal operation of the game (saving progress, security, keeping leaderboards fair, and counting totals). We don't use them to build profiles, for behavioral advertising, or for any other purpose.
Ads in the free version
The free version shows ads only in panels beside the game on large desktop screens, never on phones or tablets and never inside the game. Ads load in a separate, sandboxed frame from our ad partner, so the partner can't see the game or its saved data. We ask for child-directed treatment: ads are contextual (based on the page, not the person), with no personalized ads and no retargeting. We will name our ad partner here before ads are switched on. The Royal Charter removes ads completely.
Pages for grown-ups
The parents pages are written for adults. We may measure our own advertising on those pages (for example, whether a parent who saw our ad visited the game) using the Meta Pixel, but only after you click Accept on a clear banner. If your browser sends a Global Privacy Control signal, we treat it as “no”. We never use the Pixel on the game or on any page children read, and we never send anything about gameplay to Meta or any advertiser.
Payments
Paddle.com is the Merchant of Record for all orders. It collects the buyer's payment details, billing address, and tax information, and processes them under its privacy policy. We receive the buyer's name, email address, country, what was bought, and the order ID. We never see card details. Paddle's checkout only loads on our Royal Charter page, after a grown-up opens it.
The Royal Charter and cloud backup
For each Charter we store the charter code, its status, and the order ID. If cloud backup is turned on, we store a copy of the game progress linked to the charter code, so it can be restored on another device.
We email the charter code, receipts, and important notices about the Charter or these policies to the grown-up who bought it. We don't send marketing email unless you opt in.
Cookies and storage
The game and the pages children read set no cookies. The game uses your browser's local storage to save progress. On the parents pages, we set one first-party cookie to remember your answer to the consent banner, and Meta sets its cookies only if you click Accept. Paddle may set cookies on the Royal Charter page to run the checkout.
Who we share data with
We don't sell data or share it for advertising. We share it only with the services that run the game:
- Cloudflare: website hosting, servers, and database
- Paddle: orders, payments, and refunds
- Our email delivery provider: sending charter codes and receipts
- Our ad partner: contextual ads in the free version, which receive no personal information from children
- Meta: only on the parents pages, only after you click Accept
We may also disclose data when the law requires it.
How long we keep it
- Server request logs: 30 days.
- Anonymous game totals: kept, since they identify no one.
- Leaderboard entries: until the leaderboard is reset, or until you ask us to delete them.
- Charter and order records: while the Charter is active, and up to 7 years after, as tax and accounting rules require.
- Cloud backups: until the Charter is refunded, or you ask us to delete them.
Parents' rights
You can ask us at any time to review or delete any information connected to your child's leaderboard entries or your Charter, and to stop any further collection. Email privacy@castlebonk.com. We may ask for the charter code or the order email to confirm you're the parent. To delete progress saved on a device, use the reset option in the game's grown-ups settings, or clear the site's data in your browser.
Your rights
Depending on where you live, including under the GDPR, the UK GDPR, and California law, you can ask to access, correct, export, or delete your data, or object to how we use it. Email privacy@castlebonk.com. You can also complain to your local data protection authority. We use data to provide the game and the Charter you bought (contract), to meet tax and legal obligations, and to keep the game secure and fair (legitimate interest). The Meta Pixel on the parents pages relies on your consent, which you can withdraw at any time from the “Privacy choices” link on those pages.
International transfers
We and the services above may process data in the United States and other countries. Where the law requires it, transfers are covered by safeguards such as Standard Contractual Clauses.
Children
Castle Bonk is designed for children aged 6 and up, and for their families. We don't knowingly collect personal information from children beyond what's described above. If we learn that we have, we delete it.
Changes
If we change this policy in a way that matters, we'll update the date above before the change takes effect, and email Royal Charter holders. We won't start collecting new kinds of personal information from children without asking parents first.
Contact
Bonneville Solutions, LLC, 276 Widow Sweets Rd., Exeter, RI 02822, USA. Email: privacy@castlebonk.com.