Privacy policy

Version 2026-09-27.4 · 27 September 2026

Your account

We keep your username, account ID, join date and last login time so your account can work properly. Your password is stored as a salted hash, which means we cannot read your actual password. Your username, account ID, join date and account age are shown publicly on your profile. Your password hash, login sessions and records showing which policies you have accepted are private. We do not sell your account information. We do not ask for your real name, home address or date of birth, and the current signup form does not ask for an email address. When you connect MBOX Launcher, your browser shows map names and recently played games from that PC. The launcher reads its own maps folder and keeps recently played history locally. Map files, local game searches and play history are not uploaded to the website or saved to your account. This history belongs to the PC, so other people using the same installation can see it. You can disconnect the launcher or clear recently played on the Home page.

Cookies

We use a small number of cookies to keep you logged in, protect forms and show messages such as confirming that you logged in successfully. We do not use advertising cookies or analytics trackers. The login cookie lasts for up to 8 hours. The cookie used to protect forms normally lasts for up to a year, while message cookies are temporary. The launcher connection also uses a temporary token in this browser tab, valid for up to 8 hours. If you block these cookies, some features such as logging in or submitting forms may stop working.

Security

We use your network address and login name to limit repeated requests and help prevent abuse. The counters used for this store coded values rather than the original address or username. Server logs may include things such as request times, page addresses and search text. When Cloudflare security checks are enabled, Cloudflare receives connection and browser information so it can check for suspicious or abusive traffic. You can find more information in Cloudflare's privacy policy. If you follow a download link, the download host will also receive your request. We use account information to provide the service you have asked for. Security information is used where necessary to prevent abuse and protect accounts.

Keeping and deleting your data

We keep your account details for as long as your account exists. Login sessions expire after 8 hours and request-limit counters expire within an hour. Expired records are removed during normal cleanup, so they may not disappear immediately after they expire. Server logs are kept until they are cleared. The launcher keeps up to 100 recently played entries on your PC until you clear them. We also save which version of the policy you have read and when you read it. This means you only need to acknowledge the policy again when it changes. This record is deleted when your account is deleted.

Contact

If you have a privacy question or want to request a copy, correction or deletion of your data, email [email protected]. We may need to confirm that the account belongs to you before dealing with a request. Where the law gives you these rights, you can also ask us to restrict how your data is used, object to certain uses of your data, or request a portable copy. You can also make a complaint to the UK Information Commissioner's Office (ICO) or your local privacy regulator.

Software notice

MBOX is still being developed, so bugs and crashes may happen. You should keep backups of your maps and any other important files. We are not responsible for damage caused solely by unofficial downloads, changes made by other people, or problems with your computer that are unrelated to MBOX. This does not exclude responsibility for our own negligence or remove any rights you have under the law. Reading or accepting this policy does not give us permission to use your information for advertising, and it does not mean you give up any of your legal rights.