Privacy policy

Last updated Oct 18, 2026

This policy explains what personal data Rust in Peace collects when you use this website, play on our Rust servers, buy a Package or join our Discord, why we collect it, who we share it with and the rights you have.

Who we are

Rust in Peace ("RIP", "we", "us") runs community servers for the game Rust. We're based in the United States. RIP decides how and why your personal data is used, which makes us responsible for it (the "controller" under European data protection law).

Our owners are responsible for privacy at RIP. Reach them at [email protected] or through a ticket in our Discord.

What we collect

Steam confirms your SteamID64 to us. We never see your Steam password. We then look up or create your customer record at PayNow, our payment provider, which gives us your public Steam name and avatar. Your SteamID64, Steam name, avatar and a token that identifies you to PayNow are kept in your session cookie.

You only need to sign in to buy or manage Packages. You can browse the site without signing in.

When you buy a Package

PayNow sells Packages for us as the merchant of record. It collects your payment details, and it shares with us your name, email address, billing details such as your country and address, your SteamID64, and what you bought, for how much and when. We never see your full card number.

When you view prices, add to your cart, check out or manage subscriptions, our server sends PayNow your IP address and country so it can show regional prices and work out tax.

If you gift a Package, we use the recipient's SteamID64 to deliver it, and show their public Steam name and avatar so you can check you picked the right player. PayNow receives the recipient's SteamID64 too.

When you browse this website

Like any website, ours receives your IP address, browser details and the pages you request. Cloudflare, which sits in front of the site, processes this to deliver pages and block attacks, and our hosting can keep technical logs.

We count visits with cookieless analytics that we host ourselves. They record pages viewed, the referring site, browser, device type and country, without cookies, and don't store your IP address or identify you.

Player pages and gifting show public Steam names and avatars, fetched from Steam and cached for a few minutes.

When you play on our servers

Connection data: your SteamID64, in-game name and IP address, recorded in the server logs each time you connect.
Chat: in-game chat messages, saved in the server logs.
Game stats: kills, deaths, shots and hits, damage, longest kill, resources gathered, loot, raids, time played and similar counts, linked to your SteamID64 and in-game name.
Moderation records: reports, warnings, kicks, bans, the reasons and evidence for them, and appeals.
Anti-cheat data: detailed combat stats, VPN and alt-account checks, and automated detections, which staff use to catch cheaters and ban evaders.

When you use our Discord or link accounts

Account linking: when you link Steam and Discord through Steamcord (link.rustinpeace.co), Steamcord stores your SteamID64 with your Discord user ID and name. Our Discord bot uses the link for raid alerts, cheater loot notifications, the /stats command, map vote weight and Discord roles.
Tickets: what you write and attach in a support or appeal ticket, kept in our ticket system for support, administration and anti-cheat.
Email: if you email us, we keep your email address and messages.

Cookies

We use only cookies the site needs to work. None of them track you, so there's no cookie banner.

rip_session keeps you signed in. It's encrypted, so it can't be read or changed in your browser, and it lasts 30 days or until you sign out.
rip_signin_state ties a Steam sign-in to the browser that started it, for security. It lasts 10 minutes.
rip_signin_result tells the page that a sign-in was cancelled or failed. It lasts about a minute.
rip_purchase_intent remembers a Buy or Add to cart choice while you sign in. It lasts up to an hour, and the choice itself expires after 10 minutes.
rip_cart_checkout empties your cart once after a checkout. It lasts up to an hour.

Cloudflare can set its own security cookies, such as __cf_bm, to tell people from bots. PayNow's checkout pages set their own cookies under PayNow's policy.

Why we use your data

We use your data only for these purposes. Where European or UK law applies, each one has a legal basis:

To run your account and purchases: sign-in, the store, delivering Packages, subscriptions and support. Basis: our contract with you.
To show game stats: public leaderboards and player pages, in game and on Discord. Basis: our legitimate interest in running a competitive community. You can ask us to delete your stats (see Your rights).
To keep the servers fair and safe: enforcing the rules, anti-cheat, catching ban evasion and alt accounts, and handling appeals. Basis: our legitimate interest, and every player's, in fair servers.
To protect the store: preventing fraud and handling chargebacks. Basis: our legitimate interest.
To run and secure the website: delivering pages, blocking attacks and counting visits. Basis: our legitimate interest.
To meet legal obligations: keeping records and answering lawful requests. Basis: legal obligation.

Automated bans

Some bans are issued automatically, for example when an anti-cheat plugin detects a cheat. If you think an automatic ban is wrong, appeal it in a ticket in our Discord and a staff member will review it.

Everyone: your Steam name, in-game name, avatar and game stats are public on this website, in game and on Discord.
PayNow processes payments as the merchant of record and uses your data under its own privacy policy.
Steam (Valve) handles sign-in and public profiles under its own privacy policy.
Cloudflare delivers and protects the website.
Our hosting providers run the website, the stats system and the game servers, all in the United States.
BattleMetrics connects to our servers to help staff manage them. It receives your SteamID64, names, IP address, play sessions, chat and bans, and keeps them under its own privacy policy, which we don't control.
A VPN and alt-account detection service receives your IP address and SteamID64 to flag VPNs and ban evasion.
Steamcord links your Steam and Discord accounts.
Discord hosts our community and tickets under its own privacy policy.
Authorities or others, when required: to comply with the law, enforce our terms, or protect people's rights and safety.
A new owner: if RIP is transferred to someone else, your data goes with it, still covered by this policy.

We don't sell your personal data, and we don't use or share it for advertising.

Where your data is processed

RIP is based in the United States, and our website, stats system and game servers are hosted there. Staff who help run the servers access data from the United States, Canada and Europe, including the UK, and our service providers can process it in other countries.

If you live outside the United States, your data is transferred to and processed in countries whose data protection laws may differ from yours. We protect it as this policy describes wherever it's processed, and where our providers offer safeguards for international transfers, such as the EU's standard contractual clauses, we rely on them.

How long we keep it

Cookies: as listed under Cookies.
Server logs and tickets: logs (including IP addresses and chat), ticket transcripts and anti-cheat data, for up to 2 years.
Bans: the record of a ban and its evidence, for as long as the ban stands. Permanent bans are kept permanently.
Game stats: for as long as the servers run, so past wipes stay viewable, unless you ask us to delete them.
Emails and website logs: for up to 2 years.
Purchases: order details stay in PayNow's records, which PayNow keeps under its own policy.

BattleMetrics, Steamcord, Discord and PayNow keep the data they hold under their own policies. We can keep data longer when we need it for a chargeback, a legal claim or a legal obligation.

Your rights

Wherever you live, you can ask us to:

tell you what personal data we hold about you, and give you a copy;
correct data that's wrong;
delete your data;
stop or limit how we use it, or object to a use based on our legitimate interests;
give you your data in a portable format.

If you ask us to delete your game stats, we'll remove them from the leaderboards, player pages and our stats database. If you keep playing on our servers, new stats will be recorded and shown.

We have to keep some data even when you ask us to delete it, such as the records of a ban, a chargeback or fraud, so we can keep enforcing our rules and protect the store. We'll tell you if that applies.

To make a request, email [email protected] or open a ticket in our Discord. We'll check that the Steam account is yours, for example by asking you to message us from your linked Discord account, or to put a code we give you in your Steam profile name. Requests are free. We answer within 30 days, or tell you within that time why we need longer. Someone you authorize can make a request for you, with proof that you authorized them.

If we turn down a request, we'll explain why, and you can ask us to reconsider. We won't treat you differently for using your rights.

You can also complain to a data protection authority: in the EU, the one in your country; in the UK, the Information Commissioner's Office; in Canada, the Office of the Privacy Commissioner of Canada; in the US, your state attorney general.

California and other US states

We don't sell personal information or share it for cross-context behavioral advertising, as California and other US state privacy laws define those terms, and we don't use sensitive personal information to infer things about you. Because we don't track you across sites, we treat every visitor the same whether or not their browser sends Do Not Track or Global Privacy Control signals.

Children

Our website and servers are for a general audience and aren't aimed at children under 13. We don't knowingly collect personal data from children under 13. If you believe a child under 13 has given us personal data, contact us and we'll delete it.

Security

We protect your data with encrypted connections (HTTPS), encrypted session cookies, and payment keys that never leave our servers. No system is perfectly secure, though. If a breach puts your data at risk, we'll tell you, and the authorities where the law requires.