Privacy Policy

Overview

This policy explains what Rust Arabia collects when you play on our 2x Rust server in Dubai, join our Discord or use this website, why we collect it, and what you can do about it.

Rust Arabia is operated by CyberSynthetics Solutions LLC, Dubai, United Arab Emirates, which is the controller of the personal data described here. We handle personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). For privacy requests, open a ticket in our Discord or email hello@cybersynthetics.com.

The short version: we collect what we need to run a free game server and its community. We do not sell your data, we do not run advertising, and we do not use advertising cookies.

Signing in with Steam

You can sign in on this website with Steam. Steam confirms who you are; we never see your Steam password. When you sign in we store:

• Your Steam ID (SteamID64)
• Your public Steam profile name and avatar
• The creation date of your Steam account, from your public Steam profile
• Sign-in session records, so you stay signed in

This information comes from your public Steam profile and is refreshed from Steam from time to time. You control what your profile shows in your Steam privacy settings.

Linking Discord

Linking Discord is optional. When you link it, Discord asks you to approve two permissions: reading your basic account details, and letting us add you to our Discord server. We then store:

• Your Discord user ID
• Your Discord username

We use them to connect your Discord to your Steam account, add you to our Discord server, give you the linked role, send you raid alarms and vending logs, and check giveaway eligibility. We also note whether you boost our Discord server, so we can give booster rewards.

You can unlink Discord at any time on the linking page. Unlinking removes your Discord ID and username from your account.

Playing on the server

When you play on our server, our systems record gameplay data linked to your Steam ID:

• Your Steam ID and in-game name
• When you are online and which of our servers you are on
• Your playtime, including public playtime information from BattleMetrics, a public Rust server tracking site
• Gameplay events such as kills, deaths, gathering, building, raids and vending machine activity
• Your in-game position during play, used for the EventMap
• Public in-game chat messages
• Your giveaway entries and the playtime tokens that count towards them
• Moderation records such as bans and their reasons

Server statistics are provided by RankEval, which processes gameplay events from this server, including in-game positions, to build the public leaderboards, player ratings, challenges and the EventMap, the map on the server page that shows where fights and other events happened. These stats are public and show your in-game name.

Anti-cheat

The server is protected by Galium, a server-side anti-cheat. Galium processes gameplay data and connection details from the game server, linked to your Steam ID, to detect cheating and support moderation decisions. It runs on the server only: it does not install anything on your device or read files on your computer.

We keep anti-cheat results and ban records as long as we need them to enforce bans and keep the game fair.

This website and your browser

You can browse this website without an account. The language you see is chosen by the address (English at the root, Arabic under /ar), not by a cookie.

When you sign in, your browser keeps your session and basic profile in local storage on your device:

• An access token and a refresh token that keep you signed in
• Your Steam ID, profile name and avatar, plus your Discord ID and username if linked

The site also uses local storage or session storage for small things, such as display preferences, the state of the map interface, and campaign tags (utm parameters) if you arrive from a tagged link. This data stays in your browser. Signing out clears your sign-in data, and you can clear the rest in your browser settings.

We do not use advertising cookies or cross-site tracking. Cloudflare may set strictly necessary security cookies, as described below.

Cloudflare: hosting, security and analytics

This website runs on Cloudflare, which hosts it, delivers it quickly and protects it from attacks. To do that, Cloudflare processes technical data for every request, such as your IP address, browser type, the page requested and the time. Cloudflare may set strictly necessary security cookies to tell real visitors from bots.

We use Cloudflare Web Analytics to count visits. It is privacy-first: it reports aggregate numbers such as page views, referrers and countries, does not use cookies, and does not track you across sites. We do not use it for advertising.

To show our Discord member count, our server asks Discord for the public member count of our own Discord server. No visitor data is sent to Discord for this.

How we use data

We use the data above to:

• Run the game server, this website and your sign-in
• Show public stats, leaderboards and the EventMap
• Power linked features such as raid alarms, vending logs and roles on Discord
• Run giveaways, check eligibility and deliver prizes
• Detect cheating, enforce the rules and handle appeals
• Keep the website secure and understand overall traffic

We do not use your data for advertising and we do not sell it to anyone.

Who else processes data

Our sister services: RankEval and Galium are run by CyberSynthetics Solutions LLC, the same company that operates Rust Arabia. They process data for us as described above:

• RankEval: server statistics, public leaderboards and the EventMap
• Galium: server-side anti-cheat

Each also publishes its own privacy policy, linked below.

Third parties: we only share data with the outside services needed to run Rust Arabia. Each has its own privacy policy:

• Steam (Valve): sign-in and public profile data
• Discord: account linking, our community server and our Discord bot
• Cloudflare: hosting, security, logs and web analytics
• BattleMetrics: public playtime information
• Error monitoring: if an error happens while you are signed in, the error report may include your account ID, Steam ID and IP address so we can fix the problem

We do not sell personal data and we do not share it with advertisers. We may disclose data if the law requires it.

Where data is stored

Rust Arabia's data, including your account, linked accounts and gameplay records, is stored and processed in the United Arab Emirates.

This website is delivered and protected by Cloudflare's global network, so request data such as your IP address may be processed by Cloudflare outside the UAE, under Cloudflare's own privacy policy. We do not store personal data in Cloudflare's cache. RankEval and Galium describe where they store data in their own privacy policies.

Security

We take reasonable steps to protect your data:

• Traffic to this website and our API is encrypted with HTTPS (TLS)
• Sign-in goes through Steam and Discord, so we never receive your passwords
• Access to account data and admin tools is limited to staff who need it
• Cloudflare protects the website against attacks and abusive traffic

No system is completely secure, so we cannot guarantee absolute security. If a data incident affects your personal data, we will act in line with our obligations under UAE law.

How long we keep data

We keep data only as long as we need it:

• Account data (Steam and Discord details) is kept while your account exists, until you ask us to delete it
• Discord details are removed when you unlink Discord
• Gameplay stats are kept for current and past wipes, so leaderboards and history stay accurate
• Ban and anti-cheat records are kept as long as needed to enforce bans
• Data in your browser stays until you sign out or clear it
• Cloudflare keeps its logs according to its own retention periods

Your choices and rights

You decide what you link:

• Unlink Discord at any time on the linking page
• Sign out to clear sign-in data from your browser
• Change what your Steam profile shows in Steam's privacy settings

To ask what data we hold about you, get a copy, correct it or have your account deleted, open a ticket in our Discord or email hello@cybersynthetics.com, and include your Steam ID. We may need to confirm that the account is yours. When we delete an account, we remove your Steam and Discord details from it, and your in-game chat messages if you ask. We may keep the ban records needed to keep a banned player off the server. Public gameplay stats are handled as explained in the next section.

Public game data

Much of what our server records is public game data: it is visible in-game to other players, or it comes from your public Steam profile, which you control.

Under UAE Federal Decree-Law No. 45 of 2021 (PDPL), information that a person has intentionally made public, or that is publicly accessible, is not treated as personal data. Our processing of the public game data below is therefore exempt from erasure and restriction requests:

• Gameplay statistics visible in-game, such as kills, deaths, gathering and building
• Steam IDs and publicly visible Steam profile information
• In-game names chosen by players
• Team affiliations visible in-game
• EventMap position data recorded during play

This exemption does not cover your website account (sign-in records and the Steam profile details stored with it), your Discord link data (Discord ID and username) or your in-game chat messages. You can ask us to delete those at any time.

We may decline requests to erase or restrict the public game data listed above. We will still remove your account and Discord details on request and anonymise your public stats, so leaderboards stay accurate. Ban records are kept as long as needed to enforce bans.

Children

Rust is rated for mature players aged 17 and over, and the services are not meant for children. They are not directed at children under 13, and we do not knowingly collect data from them. You must also meet the minimum age set by Steam, Discord and the age rating for Rust where you live; we rely on Steam's and Discord's own age requirements. If you think a child has linked an account, contact us on Discord or at hello@cybersynthetics.com and we will remove it.

Changes to this policy

We will update this policy when what we collect, or how we use it, changes. When we do, we update the date at the top of this page and announce significant changes in our Discord.

Contact

For any privacy question or request, open a ticket in our Discord or email hello@cybersynthetics.com. Include your Steam ID and, if you have linked it, your Discord username, so we can find your account.

Rust Arabia is operated by CyberSynthetics Solutions LLC, Dubai, United Arab Emirates.