Privacy Policy

1. Scope of this Privacy Policy

This Policy covers information processed through the public website, the 2Stoned Rust Discord, Steam authentication, BattleMetrics verification, in-game moderation tools, payment storefronts, and any official surveys or support channels we operate. It also extends to the queue tools and directories published on our Rust EU servers page. If a third-party service links to or integrates with our systems, their own privacy notice governs the data they collect directly.

2. Personal data we collect

We may collect the following categories of data:

• Account identifiers: SteamID64, Discord ID, BattleMetrics ID, in-game character name, and related profile metadata.
• Contact information: Email address or Discord handle when you contact support or submit appeals.
• Server telemetry: Connection timestamps, queue position, ping, ban records, wipe participation, and gameplay statistics used for leaderboards, including metrics from modded Rust wipes.
• Transaction records: Perk purchases, donation history, order identifiers, and billing country as supplied by Tip4Serv, Tebex, Steam, or similar payment processors. We do not store complete payment card details.
• Technical data: IP address, browser type, device identifiers, operating system, referring URLs, and cookie identifiers to secure the site and diagnose performance issues.
• Communications: Support tickets, moderation logs, survey responses, and messages submitted to staff-operated channels.

3. How we collect your information

We receive data directly from you when you authenticate with Steam, submit a form, make a purchase, or engage with our staff. We also collect data automatically via server logs, cookies, analytics tools, and BattleMetrics API requests used to confirm playtime. When necessary we may combine information from public sources (for example, your public Steam profile) with data we already hold to maintain accurate records.

4. How we use your information

We process personal data for the following purposes:

• Operating, maintaining, and securing the website, servers, leaderboards, and Discord community.
• Providing support, responding to tickets, and enforcing community rules.
• Processing donations or perk purchases and delivering associated in-game benefits.
• Monitoring server health, combating cheating or abuse, and detecting network issues.
• Publishing aggregate statistics, wipe results, or anonymised insights for the community.
• Complying with legal obligations, including responding to law-enforcement requests when required.
• Communicating updates about wipes, events, or policy changes when you opt to receive such notices.

5. Our legal bases for processing

When the UK GDPR or EU GDPR applies, we rely on the following legal grounds: (a) performance of a contract when we provide requested services such as server access or perk delivery; (b) legitimate interests including protecting our community, improving the Services, and preventing fraud; (c) compliance with legal obligations; and (d) consent, for example when you opt in to optional communications or permit us to access external profile data.

6. When we share your information

We do not sell personal data. We may share information with trusted partners and service providers who assist in operating the Services, including hosting providers, analytics platforms, payment processors, BattleMetrics, Discord, and Steam. These parties are contractually obligated to handle data securely and only as instructed. Information may also be disclosed to law enforcement, regulators, or other parties when required by law, to protect the rights or safety of players, or in connection with a merger, acquisition, or asset transfer involving 2Stoned Rust.

7. Cookies and similar technologies

We use first-party and third-party cookies to remember preferences, keep you signed in, secure the site, and gather analytics. Additional details, including the specific cookies we deploy and how to manage them, are provided in our Cookie Policy.

8. How long we keep your information

We retain personal data only for as long as necessary to fulfil the purposes described above or to comply with legal requirements. Retention periods vary depending on the data type—for example, ban records may be kept for the life of the community to protect players, while web analytics data is typically aggregated or deleted within 24 months. When data is no longer required we securely delete, anonymise, or archive it.

9. How we protect your information

We implement technical and organisational measures designed to protect personal data, including encrypted connections, access controls, regular patching, and audit logging on administrative tools. No system is completely secure; you are responsible for safeguarding your own devices and reporting suspected incidents promptly.

10. International data transfers

Our infrastructure may be hosted in the United Kingdom, the European Union, or the United States. When we transfer data outside the UK or EU we rely on adequacy decisions or implement safeguards such as Standard Contractual Clauses to ensure your information remains protected.

11. Your privacy rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, as well as the right to data portability. You can submit requests by emailing privacy@2stonedrust.com. We may need to verify your identity before fulfilling a request. You also have the right to complain to the UK Information Commissioner’s Office or your local data protection authority.

12. Managing your choices

You can control marketing communications by adjusting your Discord notification settings or unsubscribing from email updates. Browser settings and in-site controls allow you to manage cookies. Declining certain cookies may impact functionality, such as retaining your language preference or keeping you signed in.

13. Children and young players

We do not knowingly collect personal data from children under 13 or from anyone under the age required to play Rust in their jurisdiction. If you believe a child has provided us with personal information without appropriate consent, please contact us and we will take steps to delete the data.

14. Automated decisions and profiling

We may use automated tools to detect cheating, duplicate accounts, or suspicious queue behaviour. These systems are periodically reviewed by staff, and you may request a manual review if an automated action affects your access.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be announced via the website or Discord. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Services after an update signifies your acceptance of the revised Policy.