Privacy Policy

Last updated: March 26, 2026

RMC ("Rust Mission Control") is operated by 20K.GG. This policy describes what data we collect, how we use it, and your rights regarding that data.

Information We Collect

When you create an account or connect a server, we collect:

  • Account email address
  • Discord ID (if you authenticate via Discord OAuth)
  • Steam ID (for player lookups and linking)
  • Server connection data (IP, RCON port, encrypted RCON password)
  • Player data retrieved from your connected Rust servers (names, SteamIDs, activity)
  • Usage analytics (pages visited, features used, session duration)

How We Use Your Data

  • Service operation: connecting to your servers, executing RCON commands, displaying server state
  • Moderation tools: ban networks, player history, combat log analysis
  • Analytics: server population trends, event timelines, wipe scheduling
  • Security: detecting anomalous behavior, cheat detection, audit logging

Data Storage & Encryption

  • RCON passwords are encrypted at rest using AES-256-GCM
  • All data is stored in PostgreSQL with role-based access controls
  • Infrastructure is hosted on servers located in the United States
  • All connections use TLS encryption in transit

Data Retention

  • Server logs, combat logs, and chat logs are retained for a configurable period: 30, 90, or 180 days depending on your plan
  • Account data is retained until you request deletion
  • Anonymized analytics may be retained indefinitely for service improvement

Third-Party Services

We use the following third-party services:

  • Stripe for payment processing. We never store your full card number.
  • Resend for transactional email (account verification, password resets, billing receipts)
  • Discord for OAuth authentication and bot integration
  • Steam for player data enrichment (profile info, VAC status)

Your Rights

  • Access: you can view all data we hold about you from your account settings
  • Export: download your data in CSV or JSON format at any time
  • Deletion: request account and data deletion; completed within 30 days
  • Portability: your server data belongs to you and can be exported at any time

Cookies

RMC uses session cookies for authentication only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Contact

For privacy questions or data requests, contact us at [email protected].