Privacy Policy for Neon's Bonkery Mod for Bonk.io
Last Updated: October 2026
Neon's Bonkery Mod ("we", "our", or "the extension") is committed to respecting and protecting user privacy. This Privacy Policy provides a clear, transparent explanation of how our Chrome extension operates, what browser permissions it requests, why each permission is used, and why no personal information is ever collected.
==================================================
1. ZERO DATA COLLECTION & STRICT NO-LOGGING
==================================================
Neon's Bonkery Mod operates entirely client-side within your browser.
• We DO NOT collect, store, transmit, or sell any personal data.
• We DO NOT collect usernames, passwords, Bonk.io account credentials, IP addresses, or location data.
• We DO NOT track your browsing history or monitor activity outside of the Bonk.io website.
• We DO NOT use tracking cookies, analytics services, advertising networks, or third-party telemetry scripts.
==================================================
2. PERMISSIONS REQUESTED & WHY THEY ARE NEEDED
==================================================
To ensure maximum security and adhere to the principle of least privilege, Neon's Bonkery Mod requests only the absolute minimum set of browser permissions strictly required for its features:
A. "storage" Permission
• Purpose: Saves your personal visual and sound preferences locally on your device (e.g., active UI theme, jukebox volume level, ready notification toggle, and cosmetic choices).
• Scope: Data is saved strictly inside the browser's local chrome.storage and localStorage areas. It never leaves your machine.
B. "notifications" Permission
• Purpose: Displays an optional local desktop notification when fellow players click "Ready" in the game lobby while your Bonk.io tab is running in the background.
• Scope: Notifications are triggered entirely locally. No notification content or identifiers are ever logged or sent anywhere.
C. Host Permission: "https://bonk.io/*"
• Purpose: Allows the extension's content script to inject into the Bonk.io game interface and gameframe (https://bonk.io/gameframe-release.html).
• Scope: The script executes exclusively on bonk.io to render custom lobby themes, display the /commands HUD, manage the audio player, and enable chat translation.
==================================================
3. ARE ALL OF THESE PERMISSIONS TRULY NECESSARY?
==================================================
YES — and ONLY these three. We have intentionally eliminated all superfluous, high-privilege permissions:
• We DO NOT request "<all_urls>" or broad web access — host permissions are restricted exclusively to https://bonk.io/*.
• We DO NOT request "cookies" or access your authentication tokens.
• We DO NOT request "webRequest" or intercept non-game network traffic.
• We DO NOT request "tabs" or monitor other open browser tabs.
• We DO NOT request "activeTab" because specific host matching is cleaner and more predictable.
Every single permission in our manifest has a direct, visible, user-facing function that cannot operate without it.
==================================================
4. PRIVATE MESSAGING (E2EE) SECURITY
==================================================
The extension includes a private chat feature (/pm). When you communicate privately with another player who uses the mod:
• Key Generation: Cryptographic key pairs (RSA) are generated directly in your browser using the official Web Crypto API (crypto.subtle).
• Local Encryption: Messages are encrypted on your device and decrypted only by the designated recipient.
• No Intermediate Server: Encrypted packets pass through the standard game room peer connection without any third-party logging or proxy intercept.
==================================================
5. THIRD-PARTY SERVICES & RESOURCES
==================================================
• Translation: When you use /translate, /talklike, or /translateto, text snippets are passed directly to public translation endpoints to generate translated text in real-time.
• Jukebox Streaming: If you provide an audio stream URL for the jukebox, the browser's native HTML5 audio element streams the media directly from the source host.
==================================================
6. USER CONTROL & REMOVAL
==================================================
You have complete control over the extension at all times:
• You can enable or disable any feature (such as notifications or sound effects) instantly via the extension popup menu.
• You can uninstall the extension at any time via Chrome's Extension Manager (chrome://extensions). Upon uninstallation, all local settings are immediately removed by Chrome.
==================================================
7. CONTACT & INQUIRIES
==================================================
If you have any questions or feedback regarding this Privacy Policy or the security of Neon's Bonkery Mod, please reach out via our official community support channels and GitHub repository.