Who we are
RustDash ("we", "us") is an admin panel for Rust game servers available at rustdash.io. This policy covers the website, the panel and the RustDash plugin that runs on game servers.
It applies to two groups of people: panel users — server owners and their staff — and players on servers connected to RustDash.
What we collect
Your account
- Email address, first and last name, avatar (optional).
- Password — stored only as a bcrypt hash; we can't see it.
- Your Steam ID (required to use the panel) and, if you use them, your Google account ID and Telegram ID.
- Projects, servers, staff invitations and settings you create.
Billing
Your plan, payment amounts, status and the payment provider's transaction ID. Card details are entered on the payment provider's page — we never receive or store them.
Support
Tickets, messages and images you attach.
Website visits
When you open public pages, we record the page, referrer, IP address, browser, device type and country. This is our own analytics: no third-party scripts, no cookies. Our web servers also keep short technical logs of requests (IP, time, address) for security and troubleshooting.
Data from game servers
When a server owner installs the RustDash plugin, the server sends us data about the game and its players:
- Steam ID, nickname, IP address, country, ping, in-game position and team.
- Chat messages, kills and combat details, reports, sign images, stash finds.
- Bans, mutes and checks, including the contact a player gives during a check.
- Server details: name, address, map, online, performance.
For this data, the server owner decides what is collected and why — we process it on their behalf to run the panel. Server owners are responsible for telling their players that the server uses RustDash.
For players
How we use data
- To run the service: show your servers, players and chat, deliver commands, keep statistics.
- To keep accounts safe: sign-in, email codes, sessions, limits against abuse and spam.
- To send service emails: confirmation codes, password resets, invitations, sign-in notices. No marketing emails.
- To process payments and keep a record of them.
- To answer support requests.
- To power AI features you turn on — chat moderation and player analysis.
- To improve RustDash using aggregated visit statistics.
Who we share it with
We don't sell personal data. We pass it only to providers that help run RustDash, and only what each of them needs:
- Hosting provider
- Servers where RustDash and its databases run.
- Resend
- Delivering emails — your address and the email itself.
- Yandex SmartCaptcha
- Checking that sign-in, sign-up and password reset requests come from a person — your IP address and technical data about your browser.
- Signing in with Google, if you choose it.
- Steam (Valve)
- Linking your Steam account; public Steam profiles of players (avatar, hours, VAC bans).
- Payment providers
- YooMoney, Paypalych, Platega — processing your payment.
- AI provider
- Reg.cloud (Qwen model) — only when AI features are used: chat messages for moderation, the questions you ask the assistant and the player data it needs to answer. For billing we keep only how many tokens each request used, not its content.
- Telegram
- Linking your Telegram account, if you choose it.
| Provider | What and why |
|---|---|
| Hosting provider | Servers where RustDash and its databases run. |
| Resend | Delivering emails — your address and the email itself. |
| Yandex SmartCaptcha | Checking that sign-in, sign-up and password reset requests come from a person — your IP address and technical data about your browser. |
| Signing in with Google, if you choose it. | |
| Steam (Valve) | Linking your Steam account; public Steam profiles of players (avatar, hours, VAC bans). |
| Payment providers | YooMoney, Paypalych, Platega — processing your payment. |
| AI provider | Reg.cloud (Qwen model) — only when AI features are used: chat messages for moderation, the questions you ask the assistant and the player data it needs to answer. For billing we keep only how many tokens each request used, not its content. |
| Telegram | Linking your Telegram account, if you choose it. |
Some of these providers process data outside your country. We may also disclose data when the law requires it.
How long we keep it
- Your account
- Until the account is deleted
- Chat messages, kills
- 30 days
- Reports, stash logs
- 90 days
- Bans, mutes, checks
- While the project exists
- Hourly online statistics
- 1 year
- Daily player activity
- 90 days
- Website visit records
- 90 days
- Uploaded files no longer used
- Deleted after 1 day
| Data | Kept for |
|---|---|
| Your account | Until the account is deleted |
| Chat messages, kills | 30 days |
| Reports, stash logs | 90 days |
| Bans, mutes, checks | While the project exists |
| Hourly online statistics | 1 year |
| Daily player activity | 90 days |
| Website visit records | 90 days |
| Uploaded files no longer used | Deleted after 1 day |
When a server wipes, its chat, kills, reports, signs, stash logs and player list from before the wipe are deleted. When a project is deleted, all of its game data is deleted. When an account is deleted, its projects go with it; support tickets stay, but are no longer linked to you.
Security
- All connections — website, panel and plugin — use HTTPS.
- Passwords are stored as bcrypt hashes. Changing your password signs you out everywhere.
- Sessions live in HttpOnly cookies that page scripts can’t read.
- Databases run on a private network and are not reachable from the internet.
- Each game server signs its requests with its own long random secret.
- Staff see only the tabs, actions and servers their owner allowed.
No system is perfectly secure. If we learn of a breach that affects you, we'll let you know.
Your rights
You can ask us to:
- show what personal data we hold about you;
- correct it — most of it you can edit in your profile;
- delete it, including your whole account;
- stop processing it where the law allows.
Write to hello@rustdash.io from the email of your account. Account deletion is done by request for now — there is no button in the profile yet. We may ask you to confirm that the request is yours.
Changes
We update this policy when RustDash changes. The date at the top shows the latest version; for important changes we'll also notify you by email or in the panel.
Contact
Questions about this policy or your data — hello@rustdash.io.
Panel users can also open a ticket from the Support panel in the dashboard.
Other documents