سياسة الخصوصية

Scarab Rust is a community-run Rust project, referred to here as "we", "us" or "the community". Scarab Rust is not an incorporated company. This policy explains what data we collect when you use scarabrust.com, our Discord server and our game servers, why we collect it, who we share it with, and what choices you have.

This policy applies to everyone using scarabrust.com, our Discord and our servers. Our services are intended for players aged 18 and over. If you are under 18, please do not use our services or provide us with any data.

1. What we collect

Depending on how you use Scarab Rust, we collect:

• Steam data: your Steam ID, Steam profile name and avatar, obtained when you log in with Steam.
• Discord data: your Discord ID, username and avatar, obtained when you link or log in with Discord, and your roles or membership in our Discord server.
• Technical data: your IP address, when you connect to the site or one of our game servers, used for security, anti-cheat and abuse prevention. We may also use your IP address to estimate your general location (city/country level) for showing you the nearest server or relevant regional content.
• Gameplay and moderation data: in-game actions, match and round results, ranked stats, reports filed against you or by you, anti-cheat flags, mutes, warnings and bans, and staff notes related to moderation decisions.
• Support ticket contents: anything you write to us in a support ticket, including messages, attachments and screenshots you choose to upload.
• Voice data: in some cases we may capture and store voice data from our game servers, used for moderation. It is kept for up to three months.
• Chat logs: in-game global, team and private chat messages, and messages sent in our Discord server, are logged and retained for moderation purposes such as investigating reports of harassment, cheating coordination or rule-breaking. Chat logs are reviewed only when relevant to a report or investigation.
• Store and payment data: which products or subscriptions you purchased and when. We do not collect or store your card, bank or wallet details ourselves; those are handled by our payment provider, described in section 4.

We do not see or store your Steam or Discord password at any point. See section 3 for how linking works.

2. Why we collect it

We use this data to:

• Identify you across the site, Discord and our servers, so your account, rank and clan carry over correctly.
• Run moderation: investigate reports, review anti-cheat flags, and apply or lift mutes, warnings and bans fairly.
• Operate ranked play, clans, the store and support tickets.
• Keep the servers and site secure, and prevent cheating, abuse and fraud.
• Respond to the support tickets you open.

Data collected for moderation, including reports, flags and staff notes, is used mainly for internal moderation and is restricted within the staff team on a need-to-know basis. We do not sell your data, and we do not use it for advertising profiles.

Some anti-cheat flags or autoban rules may trigger an automated restriction, such as a mute, queue block or ban, without a staff member reviewing that specific case first. These automated actions can be appealed through a support ticket, and a staff member will review the appeal.

3. Linking Steam and Discord

Linking your Steam and Discord accounts uses standard OAuth login, the same technology used by countless other websites. When you click to link an account, you are sent to Steam's or Discord's own login page. You enter your credentials there, not on our site, and we never receive or see your password. Steam or Discord then tells us who you are and hands us a token that lets us read the limited profile information described in section 1.

You can unlink a linked account at any time from your profile settings. Unlinking removes the connection going forward, but some records tied to your account, such as past moderation actions, match history and support tickets, are retained as described in section 5, since those records exist independently of the live connection. For more detail on why linking is safe and what it does and does not give us access to, see our linking and OAuth explainer.

4. Who we share data with

We share data only where needed to run the service:

• PayNow.gg: our store payment processor. PayNow.gg acts as merchant of record for all store purchases, meaning they handle your payment details directly and we never see or store your card, bank or wallet information. We only receive confirmation of what was purchased and by whom.
• Discord: when you link Discord, or interact with our Discord server, Discord processes that data under its own privacy policy as the platform operator.
• Steam: when you sign in with Steam, Steam processes that data under its own privacy policy as the platform operator. We receive your Steam ID and public profile information only.
• BattleMetrics: we use BattleMetrics to help track players and manage bans across our servers. Player data such as your Steam ID, in-game names, connection information and ban records is processed and stored by BattleMetrics under its own privacy policy.
• Our anti-cheat systems: including our own custom anti-cheat, which processes gameplay data to detect cheating. This data is used for moderation and is not sold or shared outside that purpose.
• Law enforcement or legal process: if we are required to disclose data to comply with the law, or to protect the rights, property or safety of our community or others.

We do not sell your personal data to third parties.

5. How long we keep data

We keep account, moderation and support data for as long as your account is active. Technical logs such as IP addresses and general moderation data are kept for up to one year. Voice data, where captured, is kept for up to three months. Chat logs are kept for up to one year to support moderation investigations and appeals, after which they are deleted or anonymized unless retained longer as part of an active ban appeal or investigation. Ban and moderation records are retained after an unlink or account closure, so that bans cannot be cleared simply by unlinking. If you would like to understand what is retained about you or ask for deletion of data we are not required to keep, contact us as described in section 7.

6. Cookies

We use a small number of cookies and similar local storage:

• Essential cookies: needed for login sessions, security (such as CSRF protection) and remembering basic preferences like language and theme. These cannot be switched off, as the site will not function correctly without them.
• Analytics cookies: used, where enabled, to understand how the site is used so we can improve it. These are only set if you accept them in the cookie banner.
• Third-party embed cookies: pages that embed Discord widgets, the PayNow.gg checkout, or Steam login may set their own cookies under those providers' own policies, outside our control.

You can accept or decline non-essential cookies through the consent banner shown on your first visit, and you can change your choice at any time on our cookies page.

7. Your rights

Wherever you are located, we aim to honor the following rights over your personal data:

• Access: ask what data we hold about you.
• Correction: ask us to correct inaccurate data.
• Deletion: ask us to delete data we are not required to keep for moderation, legal or security reasons.
• Objection: object to a specific use of your data.

To exercise any of these rights, open a support ticket through the site and describe your request. We aim to respond promptly and will explain if any part of a request cannot be completed, for example where data must be retained for moderation integrity or legal reasons.

8. Keeping data safe

We use reasonable technical and organizational measures to protect the data we hold, including restricting moderation and account data to staff who need it to do their job. No online service can guarantee perfect security, but we take this seriously and review our practices as the project grows.

9. Age requirement

Our services are intended for players aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, please contact us so we can review and remove it.

Our Discord server is only for members of our 18+ community; while Discord's own platform terms set a lower minimum age, our community access and support rules require members to be 18 or older.

10. Governing law

Scarab Rust operates with a focus on the UAE and the wider Gulf region. This policy, and our handling of personal data, is written with reference to the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. In addition, and regardless of where you are located, we apply the GDPR-style rights described in section 7 (access, correction, deletion and objection) as a baseline standard of good practice.

Because we rely on service providers such as our game server hosts, Steam, Discord, BattleMetrics and PayNow.gg, some personal data described in this policy may be transferred to, stored in, or processed in countries outside the UAE, including the United States and the European Economic Area. Where this happens, we rely on the safeguards those providers themselves publish in their own privacy policies and standard contractual terms.

11. Changes to this policy

We may update this policy as the project develops, for example as new features or providers are added. Material changes will update the "Last updated" date at the top of this page. Continued use of scarabrust.com after a change means you accept the updated policy.

12. Contact

For privacy-specific questions or requests, you can also mark your support ticket "Privacy Request" so it is routed to the team member responsible for data requests.

Questions about this policy or your data can be sent by opening a support ticket, emailing support@scarabrust.com, or reaching out in our Discord server.