Privacy

What we store, and why

A list, not a legal disclaimer: every piece of data this site holds about you, what it is for, how long it stays, and how to make it go away. If something here is not clear, that is a defect in this page — write and say so.

Who runs this

PlayRustLegacy is an unofficial Rust Legacy server, run by a private individual and not by a company. It has no advertising and it makes no money from your data — there is nothing to sell it for. The one thing that is paid for is the three euros for the kits, and of that payment this site sees nothing. It is not affiliated with Facepunch Studios.

The data, one by one

This is the complete list. There is no analytics, no advertising pixel, no tracking of what you read on the site.

Your email address — it identifies your account and it is where the confirmation and password-reset links go. It is never used to send anything else: no newsletter, no announcements.
Your password, as a hash — never in readable form. It is put through scrypt, a function designed to be slow and memory-hungry on purpose, so that even someone with a copy of the database cannot work backwards to the password. Nobody who runs this server can read it, which is also why nobody can tell you what it was if you forget it.
Your in-game name — other players see it in game. Choose accordingly: it is the one piece of this list that is public by design.
Your SteamID — a number derived from your account, which is how the game server recognises your character. It is not a real Steam account and it is not linked to Steam in any way: this server does not use Steam at all.
Your sessions — for each browser you signed in from: when it started, when it expires, the IP address it came from and the browser identification string. You can see them in your profile and close them all with one button.
Sign-in attempts — time, outcome and IP, kept for one hour. Without these, anybody could try passwords indefinitely: this is what makes the rate limit possible. They are deleted automatically.
Pending sign-ups and reset requests — while a confirmation or reset link is still valid, the request is held with the IP it came from. Confirmation links last 24 hours, reset links one hour; after that the record is deleted.
Whether you are a supporter, and since when — one date on your account row, written by hand when the kits are switched on. Only that: not how much you sent, not when you sent it, not the transaction. It is deleted with the account.

What is not here

No real name, no date of birth, no telephone number, no payment details — no card number, no PayPal account, no transaction ever passes through this site. No location beyond the country your IP suggests, which is used to guess the language of the site and is not written down anywhere.

The kits a supporter unlocks are paid for on PayPal, which means this site never sees your card, your name or the amount. Nothing comes back here automatically: what links a payment to a game account is a person reading the receipt you send by email and writing one date on your account row. That email sits in an ordinary inbox, like any other message you might write.

In the game itself

The game server is a separate machine, in Milan. It knows your SteamID and your in-game name, and it stores what your character owns: base, chests, inventory, position. It does not know your email address. Its save file is indexed by SteamID and nothing else.

The consequence matters when you delete your account: what you built stays in the world. Nobody can get into it any more, because the account that opened it no longer exists, and it disappears at the next wipe along with everything else. It is not something this site can reach into and remove.

Who else sees it

Four services, each for one job, none of them given your data for their own purposes:

Vercel — hosts the site and runs the code that answers your requests. Like any web server, it sees the IP addresses that connect to it.
Neon — the database where the list above lives. Servers in Europe.
Resend — sends the confirmation and reset messages. It therefore sees the address a message is going to, and the message itself. European region.
Cloudflare Turnstile — the “are you human” check on the sign-up and reset forms. According to Cloudflare it uses your IP address, the technical fingerprint of your connection and your browser identification string to tell a person from a script, and does not use them to identify or profile anybody.

They are used because the alternative is running mail servers and bot detection by hand, which one person maintaining a game server in their spare time would do worse. None of them is sent your password: it never leaves the database, and only as a hash.

How long it stays

Your account and your game identity stay for as long as the account exists. Sessions expire after 30 days without use. Sign-in attempts are deleted within the hour, unconfirmed sign-ups within 24 hours, unused reset requests within one hour. Nothing is kept “just in case”.

Getting it changed or deleted

Your in-game name and your password you can change yourself, from your profile. The same page has a button that deletes the account: email address, password hash, in-game name, SteamID and every session go, immediately and for good — there is no recycle bin and no thirty-day grace period.

To change the email address on an existing account, or to ask for a copy of what is stored about you, write to whoever runs the server. There is no automatic way to do either yet.

Age

Rust is a violent game and this site is not meant for children. No age is asked or verified at sign-up, which is worth stating plainly rather than hiding behind a checkbox nobody reads.

Keeping it safe

Everything travels over HTTPS. Passwords are hashed with scrypt, session identifiers are stored hashed too, so a stolen copy of the database cannot be used to impersonate anybody. This is a small project run by one person: that is a limit worth knowing, not a claim of perfect security. The measures here are the ones that matter most, not every measure that exists.

If this page changes

The date below is updated whenever it does. There is no mailing list to announce changes through — the list of data is short and stable, and it grows only if the site gains a feature that needs something new.