Effective 1 November 2026
Privacy notice
This notice covers this website, its contact form, and the published Multibonk DLL v0.2.5 / protocol 111. Sending a message is voluntary. You can browse and download without using the form.
Who runs this project
Multibonk is an independent community project maintained by TeamAvi (maintainer: AvinadavCoh), Israel. It is not operated by MegaBonk or its developer. To contact the maintainer about your information, use the private request form and choose “Privacy request”. Messages are forwarded to the maintainer’s Gmail inbox; the destination address is kept out of the public site.
What the website processes
- Visits: Cloudflare, our hosting/security provider, processes IP addresses, request URLs, browser/network information, timestamps and operational/security logs to deliver and protect the site. The report endpoint uses your IP for short-lived rate limiting.
- Messages: we receive the title and description you write, mod version and host/client role for bug reports, and an optional reply email. A reply address is needed if you want a response to a privacy request. Free text may contain personal information you choose to include.
- Purpose: investigate bugs, provide requested support, handle privacy requests, and prevent abuse. We do not use report details for advertising, mailing lists, selling personal information, or training our own AI models.
There is no legal obligation to send us a report. If you do not submit, we cannot investigate that message or reply. Leaving the optional bug-report email blank means we cannot email you back.
How a message reaches us
Your browser sends the form to our Cloudflare Worker for validation, then directly to Web3Forms / Web3Creative for email delivery. Web3Forms receives the fields and network information such as your IP and browser metadata. Its infrastructure and spam-prevention providers may also process the submission; its policy identifies AWS, Cloudflare, Hetzner, CleanTalk and Akismet, including possible IP/email sharing for spam filtering. We receive the delivered message in Google Gmail. Access is for the project maintainer and the providers needed to operate these services, not a public bug feed.
Our Worker has no report database and does not deliberately write report bodies or email addresses to application logs. This does not mean there are no provider logs or email copies.
Where and how long
The maintainer is in Israel. Cloudflare, Web3Forms and Google may process information internationally. Web3Forms states that it operates from India and uses infrastructure in multiple regions; its privacy policy and DPA describe its safeguards. Contact us for information about the arrangements relevant to your request.
We keep report emails only as needed to investigate, respond, prevent abuse, or meet applicable legal requirements. Deletion from the maintainer’s inbox is manual; no automatic inbox-deletion schedule is configured. You can request deletion below. Provider copies and backups follow their own retention and deletion processes. Web3Forms currently states a maximum of three years for submission data unless deleted earlier or a shorter plan period applies. Cloudflare Workers Logs currently retain logs for three days on Free plans or seven on Paid plans; other security/provider records may have different periods. We do not claim that every copy disappears immediately when we delete an email.
Your choices and rights
Use the private request form for access, correction, deletion, objections, restrictions or withdrawal of submission consent. Tell us enough to locate the message, such as its title/date and reply address; do not send identity documents unless we explain a necessary, proportionate verification step. Rights and exceptions depend on applicable law. Withdrawal does not make earlier lawful processing unlawful. You can also contact the Israeli Privacy Protection Authority or your local supervisory authority.
Where a legal basis is required, we rely on your voluntary submission and consent for the requested correspondence, legitimate interests in proportionate service security/abuse prevention where permitted, and legal obligations where applicable. Requests are handled within applicable legal time limits.
Cookies and external links
Our application does not set first-party cookies, use browser storage, load advertising/analytics trackers, or record sessions. Fonts and artwork are self-hosted. Infrastructure may use necessary security cookies; see the cookie notice. GitHub, Thunderstore, Steam and any future support/payment page have their own policies. GitHub drafts omit the separate reply-email field, but anything you write in the draft itself may become public if you submit it.
Multiplayer data is different from website data
The current published DLL derives its lobby name from your Windows account username. That name is sent to the host and shared in party rosters. A direct TCP host receives connecting peers’ network addresses. Connection/session logs may contain player names, host addresses and session identifiers. Those are held on the participants’ computers; website privacy requests cannot remotely erase another player’s logs. Join only hosts you trust and remove personal information before sharing logs publicly.
We have not found a central analytics endpoint in a static inspection of this released DLL. That is not a guarantee about all game, Steam, loader or other-mod behavior. The game and loader have their own data practices.
Children and sensitive information
The email form is intended for people aged 18 or older. If you are younger, ask a parent or guardian to submit on your behalf. Do not send passwords, financial/health details, private save/account data, identity documents, or other people’s personal information. If a child’s information was submitted, contact us to request its removal.
Changes
We will update this notice when the project’s data practices change. Adding optional analytics or advertising would require a separate notice and any legally required prior consent; the current form consent does not authorize that.