Privacy Policy

How PureRust handles personal data. Updated June 15, 2026.

Data we collect

Account and Steam sign-in data

Steam ID, display name, avatar, linked account status, forum account details, profile settings, authentication session data, and persistent remember-login tokens used to keep Steam-linked accounts signed in.

Forum and community content

Topics, replies, edits, moderation actions, reports, warnings, bans, and other content you submit.

Rust server and gameplay data

Steam IDs, player names and aliases, sessions, online status, kills, deaths, NPC kills, boss fights, gathering, vending activity, teams, vehicles, container activity, chat logs, wipe history, achievements, and related statistics.

Security and network data

IP addresses, approximate geolocation, country, city, ASN, VPN or proxy indicators, request logs, device/browser metadata, Cloudflare security signals such as Ray IDs or challenge status where applicable, and admin-only security notes used to protect the service and moderate abuse.

Cookies and preferences

Necessary session/security cookies and your cookie consent record. Optional preference or analytics cookies are used only if you allow them.

How we use data

PurposeExamplesLegal basis
Run the site and accountsSteam sign-in, sessions, profilesContract or requested service
Publish community statsLeaderboards, profiles, combat logs, server statusLegitimate interests and requested service
Moderate and protect the serviceWarnings, bans, griefer monitoring, anti-abuse checksLegitimate interests
Meet legal dutiesResponding to lawful requests, preserving necessary recordsLegal obligation
Optional cookiesPreferences and analytics where enabledConsent

Sharing and processors

We do not sell personal data. Data may be shared with hosting, infrastructure, email, security, analytics where consented, and backup providers that help run the service. Cloudflare is used for DNS, CDN/proxying, performance, DDoS protection, firewall, bot/rate-limit, and other security features; visitor requests may pass through Cloudflare and Cloudflare may process IP addresses, headers, cookies, request metadata, and security signals for those purposes. Steam is used for authentication and may provide Steam profile data. Discord and other external links are separate services with their own privacy practices.

We may disclose information if required by law, to protect players or admins, to investigate abuse, or to enforce the terms and server rules.

Retention

Account data is kept while your account is active or as needed for security, moderation, and legal reasons. Gameplay and public stat records may be kept across wipes to preserve leaderboards, history, achievements, and moderation context. Security logs and backups are kept only as long as needed for operations, troubleshooting, abuse prevention, and recovery.

International transfers and security

Some providers, including Cloudflare, may process data outside your country. Cloudflare cookie and security data may be processed in Cloudflare data centers outside the EEA, including the United States, depending on the Cloudflare configuration in use. Where required, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, or comparable lawful transfer mechanisms.

We use access controls, encrypted sessions, CSRF protection, restricted admin tools, and security monitoring to protect data. No online service can guarantee absolute security.