Last updated: 5 November 2026
Contact
For anything about your data, write to [email protected] or use the contact form.
The short version
- You can use Rustpedia without an account.
- There are no ads, and we do not sell your data.
- Our analytics use no cookies, and they run on our own server.
- Signing in with Steam is optional. It stores your public Steam profile details and the things you save here.
When you browse the site
Every request passes through Cloudflare on its way to our server. Our server logs record your IP address, the page you asked for, your browser and the time. We use these logs to keep the site running and to stop abuse.
Analytics
We measure how the site is used with Plausible Analytics, which we host ourselves at s.rustpedia.com. It sets no cookies and does not follow you across other sites. Your IP address and browser details are used to work out your country and an anonymous visitor ID that changes every day. The IP address itself is not stored in the analytics data.
It records:
- the pages you view, the site you came from, your country, and your browser and device type
- whether you are signed in, as a yes or no
- actions on the site, such as searching, using a tool, filtering a list, opening a tab, adding a bookmark, or clicking a store, stream or server link
When a search finds nothing, we keep what was typed, so we can see what is missing from the site. It is shortened to 40 characters, and it is dropped if it looks like a Steam ID or an address of any kind. Please do not type personal details into the search box.
Your Steam ID and profile are not sent to the analytics. The address of a character lookup page is recorded without the Steam ID in it.
Signing in with Steam
Sign-in goes through Steam, so we never see your Steam password. When you sign in, we store:
- your Steam ID, display name, avatar and profile link
- your Steam account's creation date and your Rust playtime, where your profile shares them
- when you first signed in and were last seen
- the time zone you choose and the bookmarks you save
Your Steam inventory
After you sign in, we automatically read the public Rust part of your Steam inventory in the background, and again when you press sync. We store which skins from our catalogue you own, and how many. If your inventory is private, we cannot read it.
These reads go through third-party public proxy servers, because Steam limits requests from our own server. The connection to Steam is encrypted through them, so a proxy can see that our server is talking to Steam, but not your Steam ID or your inventory.
Character lookup
Anyone can look up the Rust character of a Steam account by its Steam ID or profile name. The character is worked out from the Steam ID, and each one has a public address that search engines can index. We keep no list of who looked up whom, apart from the server logs described above. If you want your character page taken down, contact us.
Contact form and bug reports
The contact form stores your name, email address, subject and message. The bug report form stores your message and, only if you ask for a reply, your email address. It also stores the page you were on, your screen size, browser, theme and language, and a screenshot if you attach one.
With both forms we also store your IP address and, if you are signed in, your Steam ID. We use all of this to answer you and to fix problems, and to stop abuse of the forms.
Cookies and browser storage
We use one cookie of our own that matters: rp_session, which keeps you signed in. It is only set when you sign in, and it expires after seven days without a visit. A second, short-lived cookie remembers which page to bring you back to during sign-in. Cloudflare may set its own cookies for security.
Your browser also stores your theme, the CCTV tool's sound setting and the drops you have marked as claimed. A few short notes last only as long as the tab is open: for example, that you just started signing in. None of this is sent to the analytics, and we do not use any of it to track you.
Because none of these are used for advertising or tracking, we do not show a cookie banner.
Other services
- Cloudflare carries all traffic to the site and protects it. Fonts are also delivered through Cloudflare, so your browser does not contact Google for them.
- Contabo hosts our server, in the European Union.
- Valve (Steam) handles sign-in and provides profile and inventory data.
- Images on some pages load directly from Facepunch and Steam, which can see your IP address when your browser fetches them.
Some of these companies are based outside the European Union, so your data may be processed there. Links to other sites, such as Steam, Twitch, Kick, Discord or skin stores, are governed by those sites' own policies.
How long we keep it
- Web server logs: 14 days.
- Application logs: up to one month.
- Your account, bookmarks and inventory: until you ask us to delete them.
- Contact messages and bug reports: until we have dealt with them and delete them. There is no fixed date.
- Analytics: no fixed date. It holds no names or Steam IDs.
- Database backups: 14 days after the data is gone from the live site.
Why we are allowed to use it
If you are in the EU, the UK or a similar jurisdiction, these are our legal bases under the GDPR:
- Providing what you asked for (Article 6(1)(b)): your account, bookmarks, inventory features, and replies to your messages.
- Legitimate interests (Article 6(1)(f)): keeping the site secure and running, understanding how it is used so we can improve it, and offering the character lookup.
Your rights
You can ask us for a copy of your data, and ask us to correct or delete it, to restrict how we use it, or to hand it over in a portable form. You can also object to uses based on legitimate interests. To do any of this, including deleting your account, contact us. There is no delete button on the site yet, so we do it by hand.
You also have the right to complain to a data protection authority.
Changes
We may update this policy as the site changes. The date at the top shows the latest version.