Privacy Policy

1. Introduction

Welcome to Rusty Rails ("we," "our," or "us"), operated by Rustworks LLC, an Arizona limited liability company. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including our Rust game servers.

By accessing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Steam Account Information: When you log in via Steam, we collect your Steam ID, display name, avatar, profile URL, and public profile information.
• Discord Account Information: When you link your Discord account, we collect your Discord ID, username, discriminator, avatar, and server membership status.
• Game Server Data: Your in-game actions, playtime, statistics, and interactions on our Rust servers.

2.2 Automatically Collected Information

• Log Data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
• Session Management: We use essential cookies for authentication and security (session tokens and CSRF protection). We do not use analytics or tracking cookies.
• Usage Data: How you interact with our website and services, including feature usage and navigation patterns.

2.3 Third-Party Sources

• Steam Web API: Public profile data from your Steam account.
• Discord API: Public profile data and server membership information.
• BattleMetrics: Server performance data and player statistics (does not include personal information).

3. How We Use Your Information

We use the information we collect for the following purposes:

• Account Management: Creating and managing your account, authenticating your identity, and maintaining your profile.
• Service Delivery: Providing access to game servers, tracking statistics, and delivering in-game features and rewards.
• Communication: Sending important updates, security alerts, and administrative messages.
• Security: Detecting and preventing fraud, abuse, security incidents, and other harmful activities.
• Improvement: Analyzing usage patterns to improve our services, develop new features, and enhance user experience.
• Compliance: Meeting legal obligations, enforcing our terms, and protecting our rights.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our services (e.g., hosting providers, database services).
• Legal Requirements: When required by law, court order, or government request, or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred to the new owner.
• With Your Consent: When you explicitly authorize us to share your information.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest using AES-256
• Secure session management with httpOnly and secure cookies
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• CSRF protection on all state-changing operations

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations and resolve disputes
• Enforce our agreements and protect our rights

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your information
• Restriction: Request restriction of processing under certain circumstances

To exercise these rights, please contact us at the information provided in Section 11.

8. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: