How we keep your account safe
Plain answers to “what can you see, and what can you do with it?”
What Rustconnect is
A third-party tool built on Rust+, the official companion API that Facepunch puts in the game. It is not made by Facepunch and not endorsed by them.
What we store
- Your Steam ID, name and avatar - what Steam tells us when you sign in.
- Your Rust+ pairing credentials - the token for each server you pair, and the secret parts of the push registration that lets us receive your pairings. They are encrypted with AES-256-GCM before they are written to the database, with a key that is kept outside the database. They are never written to our logs and never sent to anyone’s browser - including yours.
- The devices you pair - their in-game ids, the names you give them and their last state, so the dashboard can show them.
What we never see
- Your Steam password. You type it on Steam’s own site; Steam only tells us which account signed in.
- Anything beyond what you pair. A Rust+ pairing belongs to one server. It gives us that server’s team chat, your team’s positions on the map, and the devices you paired there - switches we can flip when you press them, alarms and storage monitors we can read. It cannot sign in to your Steam account.
Who in your team can do what
- Everyone in your Rustconnect team sees the team’s servers and devices and can press switches.
- Only the team’s owner and admins can pause or unpair a server.
- Nobody in the team - owner included - can see a pairing token.
Turning it off
- Pause a server on the dashboard and we stop connecting to it; everything else stays.
- Unpair a server on the dashboard and its pairing token and devices are deleted.
- Delete a team (owner only) from the Team page: its servers, devices and history go with it.
- Delete your account and everything attached to it: email support@rustconnect.net and we remove it.
Where it lives
On Fly.io in Amsterdam, with the database on the same machine. A backup is taken every night, encrypted, and copied to Cloudflare R2 storage, so a problem with one provider does not take the backups with it.
Questions
Email support@rustconnect.net. More on data in our privacy policy.