Privacy Policy

Rustly is an independent Rust tools and database site. For any privacy question or request, contact privacy@rustly.com. We are the data controller for the information described here.

Everyone (no account needed): privacy-friendly, aggregate analytics (pages viewed, approximate region, device type) and essential technical logs. We do not use these to identify you.

If you create an account, we collect only what the sign-in method returns and what you choose to add:

• Steam (OpenID): your SteamID, display name and avatar. Used to sign you in and, if you enable it, to read your public Steam inventory for valuation.
• Discord (OAuth): your Discord ID, username and avatar, and email if you grant it.
• Email magic-link: your email address.
• Your content: server watchlists, alert preferences, saved raid/base plans, checklists, saved calculator results, watched skins, and your timezone.
• Optional channels: a Discord webhook URL or web-push subscription, if you set one up to receive alerts.

We never receive or store your Steam or Discord password — sign-in is handled entirely by those providers. We do not store payment card details; card payments (if you subscribe) are handled by Stripe.

• To run the site and your account.
• To send the alerts you configure (wipe reminders, base-decay reminders, price alerts) over the channels you choose.
• To value your public Steam inventory and show its worth over time, only if you enable it.
• To keep the service secure and prevent abuse.

Our legal bases (UK/EU GDPR) are: performance of a contract (running your account and alerts), legitimate interests (security, improving the site) and consent(optional inventory reading and notification channels), which you can withdraw at any time.

We use trusted providers who process data only on our instructions:

• Vercel — hosting.
• Neon — database.
• Steam / Valve and Discord — authentication and, for Steam, public inventory data.
• BattleMetrics — server information for your watchlist.
• SteamWebAPI — skin and inventory pricing.
• Resend — sending alert and transactional emails.
• Stripe — payment processing, only if you subscribe.

We do not sell your personal data. Some outbound links to marketplaces are affiliate links; those sites have their own privacy policies.

We use a small number of cookies: an essential, secure session cookie to keep you signed in, and privacy-friendly analytics. We don't use advertising or cross-site tracking cookies.

We keep account data for as long as your account exists. Inventory and price snapshots are kept to show history until you delete your account. Notification logs are kept short-term for reliability. Delete your account and we erase your personal data (see below).

Under UK/EU GDPR you can access, correct, export, restrict or object to processing of your data, and you have the right to erasure. You can delete your account and all associated personal data at any time from your account settings, or by emailing privacy@rustly.com— we'll action deletion requests within 30 days. You can also unsubscribe from any alert with one click without deleting your account.

Rustlyis not directed at children under 13, and account features are intended for users old enough to consent to data processing in their country (16 in parts of the EU). We don't knowingly collect data from children below that age.

We may update this policy as the site evolves. Material changes will be reflected by the “last updated” date above. Questions? See our contact page.