This policy explains what data VillageRust collects when you use the website, our Discord bot and the game servers, why we need it and what you can do about it.
- We only get your public Steam and Discord profile — never your passwords.
- Card details go straight to our payment provider Stripe. We never see or store them.
- Server logs and chat are kept only as long as needed to moderate and resolve disputes.
- You can download or delete your data at any time in Account settings.
01Who we are
VillageRust is run by MB „Trivado” (company code 307099290, VAT LT100018067719), Lithuania. We are the data controller. Contact: team@villagerust.com.
02What we collect
- Steam account — SteamID64, display name and avatar when you sign in with Steam.
- Discord account — user ID, username, avatar and, for staff, your roles on our Discord server.
- Gameplay data — stats per wipe (kills, deaths, playtime, raids, gathered resources), connection times, in-game chat and moderation history.
- Purchases — order number, VIP tier, servers, amount, currency, country, payment method and the card brand with last four digits provided by Stripe, and an optional receipt email.
- Support — tickets, messages and the files you attach.
- Technical data — IP address and browser information for security, rate limiting and fraud prevention.
03Why we use it
| Purpose | Legal basis |
|---|---|
| Running your account, stats and profile | Contract |
| Delivering VIP and sending receipts | Contract |
| Accounting and tax records | Legal obligation |
| Moderation, anti-cheat and security | Legitimate interest |
| Discord notifications you turn on | Consent |
| Anonymous page statistics | Consent |
04Who we share it with
- Stripe Payments Europe, Ltd. (Ireland) — payment processing and fraud prevention.
- Hostinger (EU data centres) — website hosting and database.
- Discord Inc. — sign-in, roles and direct messages you enable.
- Valve Corporation (Steam) — sign-in and public profile data.
- Google — only for staff members who link a Gmail account for security emails.
We never sell your data. Some providers are outside the EU; transfers are covered by the EU Standard Contractual Clauses or an adequacy decision.
05How long we keep it
- Sessions — up to 30 days of inactivity.
- Game stats and profile — while your account exists.
- Support tickets and attachments — 24 months after the ticket is closed.
- Security and audit logs — 12 months.
- Orders and invoices — 10 years, as required by Lithuanian accounting law.
06Your rights
You can access, correct, export or delete your data and object to or restrict processing. Export and delete are available in Account settings → Danger zone; for anything else email team@villagerust.com. You may also complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
07Children
Rust is rated for players aged 16 and older. Purchases by minors require permission from a parent or guardian.
