Privacy policy

Knot Head Games. Last updated 10 November 2026.

There Goes the Kingdom (called Gone Bonking until November 2026) doesn't ask for your real name, email address or location to play. This page explains what the game and this website send, who else is involved, and what you can do about it. The Android version has optional ads, an optional purchase and Google Play Games sign-in; the Windows version has none of those.

What the game sends to us

The game talks to our server at gonebonking.com, the site's address before the game was renamed. Both of these are on by default and can be switched off in Settings, on the Gameplay tab.

Online High Scores. When you finish a run, the game posts it to the high score boards: your Online Name, your hero, the run's time, kills, gold, level, stage, difficulty and loadout, whether it was a co-op or daily run, and the game version. It also sends a random ID made for your install, so only you can raise your own run's score. On Windows the Online Name is one you type (it starts as "Player"). On Android it is your Google Play Games name once you have signed in.
Share Play Logs. The game uploads a play log of each run: health, damage taken and what dealt it, the cards you picked, frame times and memory use, your graphics settings, the number of errors the game hit and the latest error message, and a description of the device (model, graphics chip, operating system version, screen size and memory). It carries the same random ID and Online Name. We use it to find bugs and tune difficulty and performance. It is never shown on the site.

When these arrive, our server also notes the country the request came from and keeps a one-way hash of the network address (not the address itself) to count players and block abuse.

Google Play Games sign-in (Android)

On Android the game signs you in with Google Play Games when it starts, and links that to a Unity Authentication player ID. If you decline or it fails, the game carries on with a profile kept on your device, and you can sign in later from Settings. From Play Games we receive your Play Games display name, which becomes your name on the high score boards and play logs. Unity Technologies holds the link between your Play Games ID and the Unity player ID; our own server only ever sees the Unity player ID. We do not receive your Google password or email address.

Your card collection in the cloud (Android)

Once you are signed in, the game keeps a copy of your collection on our server so it can be restored on another device: the cards you own and how many, sealed packs, progress toward your next card, your favourite card, and the record of which packs have been delivered. It is stored against your Unity player ID by Cloudflare on our behalf. A copy stays on your device. On Windows the collection stays on your device only.

Purchases (Android)

The Android version sells one thing: a pack of three random collector cards, bought through Google Play. The chances of each card finish are shown in the shop before you buy. Cards are also earned by playing, and nothing sold changes how strong your hero is. Google handles the payment; we never see your card number or other payment details.

To deliver a pack, the game sends our server the product ID and the purchase token Google issued, and our server asks Google whether that purchase is real. We then keep a record that the pack was bought and delivered, tied to your Unity player ID, with a one-way hash of the purchase token so the same purchase can't be claimed twice. The token itself is erased once the pack is delivered.

Ads (Android)

The Android version has rewarded video ads, and only those: no banners and no ads that interrupt play. An ad plays only when you tap to watch one, in exchange for a card pack or for getting back up after a knockdown. You can play the whole game without watching any.

Ads are served by Unity LevelPlay and Unity Ads (Unity Technologies), which may pass ad requests to their advertising partners. Their software runs inside the game from launch and collects information of its own to choose, show and measure ads and to prevent fraud. That can include your device's advertising ID, device and network details such as your IP address, and how you interact with an ad. Unity's privacy policy describes how that data is used.

Before your first ad for a pack, the game asks whether ads may be personalized. Until you answer, and if you say no, we tell the ad service not to personalize them. You can change the answer at any time from Ad options in the card pack shop. You can also reset or delete your advertising ID in your phone's Android settings. We tell the ad service that the game is not directed at children.

When you watch an ad for a pack, our server makes a random session ID, gives it to the ad service, and is told by the ad service when the ad was completed. We keep a record of the pack that was granted, tied to your Unity player ID. We don't receive the advertising profile the ad service holds.

Online co-op

Co-op uses Unity's Relay and Lobby services so players can find and reach each other, with an anonymous Unity sign-in. Those services handle connection details, such as your IP address. Other players in your game see the name you typed for co-op, and a hosted game's name is visible in the lobby list. LAN co-op stays on your own network.

Who else handles data

Cloudflare runs this website and our server, and stores the high scores, play logs, mailing list, synced collections and pack records for us.
Unity Technologies provides sign-in (Unity Authentication), co-op (Relay and Lobby), in-app purchasing, the ad services on Android, and basic engine diagnostics. We have Unity Analytics and Unity's crash reporting switched off.
Google provides Google Play, Play Games sign-in and Play Billing on Android.

We don't sell your data. We use what we collect to run the scoreboards, restore your collection, deliver packs, and fix and balance the game.

This website

Mailing list. If you sign up, we keep your email address, the hero you picked, your country and a hash of your network address. We use it only to tell you about builds and playtests. Ask us and we remove you.
Downloads. We count downloads by version, country and a hash of the network address.
The site runs on Cloudflare, which processes requests to serve the pages and may keep its own standard logs. We don't run ad or tracking cookies on the site.

What stays on your device

Settings, saved runs, hero unlocks, your answer about personalized ads and an error log are stored on your device and aren't uploaded, apart from the play log details described above. Sharing a run opens your phone's own share sheet; the game doesn't send that text anywhere itself.

Your choices

Switch off Online High Scores and Share Play Logs in Settings, on the Gameplay tab. Nothing more is posted after that.
Choose non-personalized ads from Ad options in the card pack shop, or simply don't watch ads.
Decline Google Play Games sign-in. The game then carries on with a profile kept on your device.
Co-op needs a connection to work, so don't use it if you'd rather not share one.

Deleting your data

Email support@knotheadgames.com with the Online Name you played under and roughly when. We'll delete the runs and play logs under that name, and your mailing list entry if you give us that address. You can also ask us to delete the synced collection and pack records linked to your account: tell us your Google Play Games name and enough detail for us to find it. Revoking the game's Google Play Games access stops future sign-ins but does not by itself delete what we already store. Purchases are refunded through Google Play under its own rules.

Children

There Goes the Kingdom is comic horror with cartoon gore and isn't aimed at children under 13. We don't knowingly collect personal information from them. If you think a child has sent us some, email us and we'll delete it.

Security and changes

Data is sent over HTTPS. If this policy changes, the new version goes on this page with a new date.

Contact

Knot Head Games, support@knotheadgames.com.