Last updated: 28 September 2026
Bonkonauts is a multiplayer vehicle-building game. This policy sets out what the app
collects, why it needs it, and what you can do about it. It covers the Android app
(be.bonks.bonkonauts) and the game servers it talks to.
The short version. Bonkonauts has no ads, no analytics, no trackers and no third-party SDKs of any kind. The app asks Android for exactly one permission,
INTERNET, because it is an online game. The only personal data held is the account you choose to create: a username, a hashed password, your in-game progress, and an email address if you decide to add one for password resets. You can also play as a guest, which stores nothing at all. None of it is sold or shared with anyone.
Bonkonauts is run by an independent developer in Belgium. The game servers are self-hosted. No cloud analytics or advertising platform is involved anywhere. For anything in this policy, including requests about your own data, write to privacy@werya.be.
| Data | Why | Kept |
|---|---|---|
| Username (chosen by you) | Identifies your account so your progress survives between sessions. | Until you delete the account |
| Password | Signing in. Never stored in readable form. What is kept is a PBKDF2-HMAC-SHA256 hash with a random per-account salt, and that value cannot be turned back into your password. | Until you delete the account |
| Recovery email (optional) | Used only to send you a password-reset code. Never for newsletters, never shown to other players, never shared. No account needs one, so adding it is entirely your choice and you can remove it again from Settings at any time. Reset codes are themselves stored hashed, expire after 15 minutes, and die after five wrong guesses. | Until you remove it or delete the account |
| Friends (optional) | Who you have added, and any requests waiting either way, so you can see when they are in a game and join them. A friend sees your username and whether you are playing right now. Not which room, and nothing else. Adding someone is your choice, and either of you can undo it whenever you like. | Until either of you removes it, or the account is deleted |
| Session token | A random value that keeps you signed in without retyping your password. Your device keeps the token; the server keeps only a one-way hash of it, which cannot be used to sign in. Logging out invalidates it. | Until you log out, sign in again, or leave it unused for 90 days |
| Game progress: nickname, coin balance, unlocked and selected skins | Running the game. Showing you to other players, and remembering what you earned. | Until you delete the account |
| Match state: your vehicle design, position, score, deaths | Simulating the match on the server, which is what makes multiplayer fair. | Discarded when the match ends |
| IP address | Processed while you are connected, and used briefly to rate-limit login attempts and room creation so the servers cannot be flooded. It is not written to the database and not linked to your account. | In memory only, for the length of the rate-limit window (up to an hour), then dropped. Never written down. |
No real name, email address, phone number, postal address or date of birth. No location data. No contacts, photos, files, camera or microphone access. No advertising identifier, device identifier or fingerprinting. No payment information, because in-game coins are earned by playing and cannot be bought with real money. No crash reporting and no usage analytics.
Nobody. There are no advertising networks, no analytics providers and no third-party services receiving any of it. It is not sold, rented or traded.
Two things are visible to other people by design. The nickname you choose is shown to the other players in your room, and an administrator can see account usernames, coin balances and who is currently in a game, in order to moderate and support the service.
On self-hosted servers in Belgium, inside the European Union. Nothing is transferred outside the EU.
No system is perfectly secure. Please use a password you do not reuse anywhere else.
An account is optional. Choosing Play as guest on the sign-in screen lets you play without one: no row is written to the accounts database and no password is stored. The display name you typed stays on your own device, except that the players you faced see it in their own match history, as the name of an opponent. A guest cannot earn coins or buy skins, since those need somewhere to be saved, and can switch to a real account at any time from Settings.
You can have your account and everything attached to it permanently erased: username, password hash, recovery email, session token, coin balance, unlocked skins, match history, and your friendships including your name in other players' lists. Nothing is retained afterwards.
In the game, open Settings and choose Delete account. It asks for your password and deletes the account immediately. Without the game, use the deletion form or email privacy@werya.be. Anyone can send those, so they are checked by hand before anything is deleted, and we may ask you to confirm that the request is yours.
Under the EU General Data Protection Regulation you may ask for access to your data, its correction, its erasure, a portable copy of it, or restriction of its processing, and you may object to processing. Write to privacy@werya.be.
The lawful basis for processing is performance of a contract, meaning running the game account you asked for, and legitimate interest, meaning keeping the servers available and resistant to abuse.
If you believe your data has been mishandled you can complain to the Belgian Data Protection Authority, the Gegevensbeschermingsautoriteit / Autorité de protection des données (dataprotectionauthority.be).
Bonkonauts is not directed at young children and does not knowingly collect personal data from them. The only data an account holds is a username of your choosing and your game progress. If you are a parent or guardian and believe a child has created an account you would like removed, use the deletion form or email privacy@werya.be.
Copies of the game installed outside Google Play check for new versions by fetching a small version file from the developer's own server. That request is an ordinary web request and reveals only what any web request does, such as your IP address. It is not logged against you and not used to build a profile.
If this policy changes, the date at the top changes with it, and the current version is always available at this address.