Privacy policy

Controller

Data controller: Rust Investor (rust.altlaptime.com). Contact: (contact email to be published)

What data we process

• Without an account: we do not ask you for any data. The server sees your IP address when serving pages; it is used for security and to limit abuse (a request log deleted after a few minutes) and may remain in the server's technical logs for a limited time.
• With a Steam account (optional): when you sign in with Steam we receive your public Steam identifier (SteamID64), your profile name and your avatar. Steam does not give us your password or your email. We also store the sign-up and last sign-in dates.
• What you save: builder bases (and whether they are public or private), favourite skins, price alerts and electricity blueprints.
• Inventory: if you look up an inventory, we use that profile's Steam identifier to get its public inventory and market value. The result is kept for 15 minutes so the lookup is not repeated.
• In your browser (it does not reach our server unless you have an account): favourites, alerts, currency, language and blueprints. More detail in the cookie policy.

Purpose and legal basis

• Providing the service you ask for (signing in with Steam, saving your bases, favourites, alerts and blueprints, viewing an inventory): performance of the service you request (art. 6(1)(b) GDPR).
• Security and abuse prevention (request limits, technical logs, moderation of public bases): legitimate interest in keeping the site secure (art. 6(1)(f) GDPR).

We do not use your data for advertising, we do not profile you, we do not use analytics tools and we do not sell or hand over data.

Who it is shared with

• Cloudflare: the site's delivery and protection network; it processes traffic (including the IP) to serve pages and stop attacks. It may process data outside the EU under the EU-US Data Privacy Framework and standard contractual clauses.
• Valve (Steam): only if you sign in with Steam; sign-in happens on Steam's official website.
• Market data provider: when an inventory is looked up, that profile's public Steam identifier is sent to it (SCMM service).
• The server's hosting provider, which stores the database.

How long

Your account data and what you save are kept while you have the account. You can delete everything whenever you want (below). Bases you made public stop being visible at that moment. Technical and security logs are kept for the minimum time needed.

Your rights

You can access, rectify or delete your data, object to or restrict its processing and ask for a copy (portability). If you have an account, you can download or delete your data yourself here; for any other request, write to the contact above. You can also complain to the Spanish Data Protection Agency (aepd.es).

To download or delete your account data, sign in with Steam and come back to this page.

Minors

The site is not aimed at children under 14. To sign in with Steam you must also meet Steam's age requirements.