Polityka prywatności
RustStats.Pro to niezależny projekt fanowski, który czyta publiczne dane Steam. Ta strona mówi dokładnie, co jest przechowywane, dlaczego, kto jeszcze to widzi i jak z tego zrezygnować. Bez prawniczego żargonu, gdzie wystarczy proste zdanie.
Informacje, które zbieramy
For any Steam account looked up here we store what the Steam Web API returns for it: display name, avatar URL, country code, account creation date, last-online time, Rust playtime, the in-game stat counters, achievement unlocks, VAC and game-ban status, and the Rust inventory with its market value. All of it is data the Steam profile already publishes. We receive nothing that a profile keeps private, and a profile set to private returns nothing at all.
You do not have to be a user of this site for a profile to be indexed — anyone can search any public SteamID64, exactly as they could on Steam itself. See Your choices to opt out.
Signing in is optional; every stat page works without it. Sign-in uses Steam OpenID: you authenticate on steamcommunity.com and Steam tells us one thing — the SteamID64 you proved you own. We never see your Steam password and never receive your email address. Against that ID we store your display name and avatar URL, and whatever you create while signed in: favourites, votes and profile comments.
Our servers keep ordinary request logs — IP address, user agent, requested path, timestamp, response status — for security, debugging and rate limiting. We also keep aggregate counters, such as how many times a profile has been viewed. Those counters are totals; they carry no visitor identifier.
We set exactly one cookie, and only after you sign in: rs_session. It contains your SteamID64, an expiry timestamp, and a cryptographic signature (HMAC-SHA256) over both. There is no session table and no random tracking value — the signature is what proves the cookie was issued by us and has not been edited. It is HttpOnly, SameSite=Lax, and expires after 30 days. Deleting it signs you out.
Your display-currency preference is stored only in your browser, under the local-storage key rs_currency. It is never sent to the server and never written to our database: prices are stored in USD and converted in your browser at display time, so we genuinely do not know which currency you read prices in.
We set no advertising cookies. Yandex Metrica, described under Third parties, does set its own analytics cookies — those are the only ones on the site we do not set ourselves.
Jak je wykorzystujemy
The data above is used for these purposes and no others:
- Render profiles, the leaderboard, comparisons and market pages.
- Compute derived numbers — K/D, accuracy, headshot rate, PvP score, rank and tier — from the counters Steam returned.
- Keep data fresh: decide when a cached profile is stale and which tracked players the hourly job should refresh.
- Operate the sign-in features you opted into: favourites, votes and comments.
- Protect the service — rate limiting, abuse and boosting investigations, and blocking automated scraping.
We do not sell or rent data. We do not build advertising profiles, we do not run behavioural tracking, and we do not share data with data brokers. Ad slots are reserved in the layout but no ad network is loaded today; if that ever changes, this page changes first.
„Ostatnio wyszukiwane”
The home page shows a strip of recently searched players. It is worth being precise about what that list is, because it looks like it might be tracking you and it is not.
Each entry records what was searched — the query text, the SteamID64 it resolved to, and a timestamp. It never records who searched it. There is no visitor identifier on those rows: no IP address, no cookie value, no session id, no account link, not even a hashed one. Nothing in the table can be joined back to a person, by us or by anyone who obtained a copy of it.
Consequently, searching for a profile while signed in is indistinguishable from searching for it signed out. Profiles that are private, banned or hidden are excluded from the strip altogether.
Strony trzecie
The source of every player number on this site. All Steam Web API calls are made server-side with our own API key, so your browser never talks to Steam on our behalf and your IP address is never sent to Valve by us. Avatars and item icons are, however, served directly from Steam CDN hosts, which means your browser does request those images from Valve. Valve’s handling of that is governed by the Steam Privacy Policy.
Used only by Server Lookup to fetch public information about Rust game servers. The request carries the server you asked about and nothing about you.
Sits in front of the site as DNS, CDN and DDoS protection, and provides the Turnstile challenge on the abuse-prone forms (reports and comments). As our infrastructure provider Cloudflare processes request metadata — including IP addresses — on our behalf.
Yandex Metrica measures how the site is used — which pages get visited, from where, and on what kind of device. It sets its own cookies in your browser and it records your IP address.
It also runs two features worth naming plainly. Webvisor records a replay of your visit: mouse movement, scrolling, clicks and keystrokes in form fields. Clickmap records where on each page people click. Metrica masks form input by default, but a replay of your session is still a recording of what you did here.
Metrica is operated by Yandex and processes this data on their servers under Yandex’s privacy policy. You can opt out for every site that uses it with the Metrica opt-out extension, or by sending Do Not Track / blocking mc.yandex.ru.
That is the complete list. Beyond Metrica there is no advertising pixel and no ad-network tracker on this site.
Przechowywanie danych
- Player stats: held while the Steam profile remains publicly visible. Current values are overwritten on each refresh rather than versioned.
- Daily snapshots (the progression charts) and inventory snapshots: up to 12 months, then deleted.
- Search log: 90 days. It carries no visitor identifier at any point.
- Server request logs: 30 days, then rotated out.
- Account data (your SteamID64, favourites, votes, comments): kept until you ask us to delete it. Deleting the account deletes the favourites, votes and comments attached to it.
- Removed profiles: when a profile goes private or is removed on request, the stored rows are deleted at the next refresh, not merely hidden.
Twoje wybory
- Make your Steam profile private. In Steam: Edit Profile → Privacy Settings, then set My profile or Game details to Private. Steam stops handing us your data immediately, and at the next refresh — within the hour for a tracked player — the profile leaves the leaderboard and stops showing numbers. This is the fastest route and it works for every stat site, not just this one.
- Hide your playtime only. Tick “Always keep my total playtime private” under Game details. Hours then render as Hidden here.
- Sign out to drop the rs_session cookie, or delete cookies for this domain in your browser.
- Clear local storage for this domain to reset the currency preference.
- Ask us directly. Email [email protected] with the SteamID64 to request removal of a profile, deletion of an account, or a copy of what we hold about it. Include the ID — without it we cannot identify the record.
Depending on where you live you may have statutory rights of access, correction, deletion, restriction and objection. We apply the process above to everyone regardless of location.
Prywatność dzieci
This site is not directed at children under 13 (under 16 in the EEA and the UK) and we do not knowingly collect data about them. Every account feature requires a Steam account, which has its own age requirements. If you believe a child’s data is held here, email [email protected] and we will remove it.
Zmiany
If this policy changes, the effective date at the top of the page changes with it, and material changes will be called out on the page rather than slipped in quietly. Continuing to use the site after a change means you accept the updated policy.
Kontakt
Privacy questions, removal requests and data enquiries: [email protected]. We answer removal requests first.
For how the data is gathered in the first place, read the FAQ. For the rules of using the site, read the Terms of Service.