Privacy Policy

This Privacy Policy explains how RustConsoleServers.com ("we", "us", "our") collects, uses, and protects your information when you use our website, services, and Discord bot. We are committed to protecting your privacy.

1. Information We Collect

From Discord OAuth (when you sign in):

• Discord user ID
• Discord username and discriminator
• Profile avatar
• Email address (if granted by you)

From server listings (what you submit):

• Server name, description, region, platform, and game mode
• Discord server ID (for bot player count integration)
• Website URL and Discord invite link
• Wipe schedule and player count
• Any images uploaded (logo, banner)

From payments (via Stripe):

• Stripe customer ID and subscription ID
• Payment status and billing history
• We do not store your card number, CVV, or bank details - these are handled entirely by Stripe.

Automatically collected:

• Browser type and device information (via standard web logs)
• IP address
• Pages visited and actions taken on our site (via Vercel analytics, if enabled)

2. How We Use Your Information

• To create and manage your account and server listings.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (listing expiry warnings, payment receipts).
• To display your server listing publicly on the site.
• To operate the Discord bot and sync live player counts.
• To detect and prevent abuse (e.g. wipe announcement cooldowns, ban enforcement).
• To improve the platform and fix bugs.

3. What Is Publicly Visible

The following information from your server listing is publicly visible to all visitors:

• Server name, description, region, platform, game mode
• Player count
• Wipe schedule and last wipe date
• Discord invite link and website URL (if provided)
• Logo and banner images (if uploaded)

Your Discord username, email, and Discord user ID are never displayed publicly.

4. Data Sharing & Third Parties

We share your data with the following third parties only as necessary to operate the service:

We do not sell your data to any third party.

5. Discord Bot — What It Can & Can't Do

The RCE bot is the integration between your server's Discord and our site. It runs on the principle of least privilege — it only requests the permissions it strictly needs to function.

✅ What the bot CAN access on your Discord:

• The name of the one channel you explicitly link via /setup (e.g. "47 / 100 Online" or "🌐 47"). It parses a number from that name.
• Basic guild metadata (guild ID, channel ID) needed to identify which server is sending the update.
• The /setwipe slash command invocation when an owner manually announces a wipe.

❌ What the bot CANNOT access:

• Message content — the bot does NOT request the Message Content Intent. It cannot read what anyone types in any channel, ever.
• Voice activity — it cannot hear voice chat.
• Direct messages — it cannot read your DMs or anyone else's.
• Member roles or profiles beyond what Discord shows publicly.
• Other channels — even though it has technical access via the View Channel permission, it only acts on the single channel you linked via /setup.

📤 What the bot sends back to our website:

• Your Discord server ID + the integer parsed from the channel name (the player count).
• Wipe events when /setwipe is run.
• Nothing else.

🔑 Minimum bot permissions required:

When you invite the bot to your Discord server, you only need to grant View Channel. That's it. If you accidentally granted more (like Administrator), you can downgrade it to View Channel only and the bot will continue working.

The RCE bot's source code is private but our practices above are auditable via Discord's own Developer Portal: open your server's integrations tab to see exactly which intents and permissions the bot has requested.

6. Community Discord

We operate a separate community Discord at discord.gg/edSBHFpnJc. If you join, the following data flows apply:

• /claim-owner — sends your Discord user ID to our website to verify you own a listed server. If matched, you receive the Server Owner role. No other data is sent or stored.
• Support tickets — when you open a ticket, a private channel is created visible only to you, mods, and the bot. Tickets are deleted on close (no archive).
• Wipe alerts — if you self-assign the Wipe Alerts role, you receive @mentions when any listed server runs a wipe announcement.
• Self-select roles — platform/region tags are stored by Discord, not by us.

7. Email Communications & Opt-Out

We send these types of email:

• Transactional (always sent): wipe alerts you subscribed to, payment receipts, listing expiry warnings, account-related notices.
• Marketing nudges (opt-out): a weekly reminder to list your server if you have a website account but no active listings.

Every marketing email includes an Unsubscribe link in the footer that one-click opts you out — no login required. Once opted out, you only receive transactional email for actions you explicitly took.

8. Cookies & Storage

We use the following cookies and local storage:

• Session cookie - keeps you logged in (NextAuth). Essential and required.
• CSRF token - protects against cross-site request forgery. Essential.
• We do not use advertising cookies or third-party tracking cookies.

9. Data Retention

• Free listings that are not confirmed are automatically deleted after 30 days of inactivity.
• Paid listings are retained for the duration of your subscription.
• Account data is retained until you request deletion.
• Payment records are retained as required by applicable law (typically 7 years).

10. Your Rights

Depending on your location, you may have the following rights regarding your data:

• Access - request a copy of the data we hold about you.
• Correction - request that we correct inaccurate information.
• Deletion - request that we delete your account and associated data.
• Portability - request your data in a portable format.
• Objection - object to certain uses of your data.

To exercise any of these rights, email us at rustconsoleservers31@gmail.com.

11. Children's Privacy

Our service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure database hosting, and limited staff access. However, no internet transmission is 100% secure and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when changes are made. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at rustconsoleservers31@gmail.com or via our contact page.