Privacy Policy

This Privacy Policy explains how R.C.P · CE · Portal ("R.C.P", "we", "us") collects, uses and protects personal data when you use our admin portal and player portal. We follow the EU General Data Protection Regulation (GDPR).

1. Data we collect

• Account data — your email address and, if you sign in with Discord, your Discord user ID and username.
• Server connection data — the RCON IP, port and password for servers you add. Passwords are encrypted at rest.
• Configuration data — the kits, shop items, casino settings, broadcasts, zones and other settings you create.
• Player data — for players who opt in by linking Discord: their in-game name, linked Discord account, RCP coin balance, playtime, daily streaks and kill/leaderboard statistics.
• Payment data — billing is handled by Stripe. We do not store full card numbers; we receive only the limited billing/subscription information Stripe shares with us.
• Technical data — basic logs and IP addresses used for security, abuse prevention and troubleshooting.

2. How we use it

• To provide and operate the service (connect to your server, run the bot, deliver shop items, track the economy and leaderboards).
• To handle billing and your subscription.
• To provide support and to keep the service secure and reliable.
• To improve the product.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Legal bases (GDPR)

We process data to perform our contract with you (providing the service and billing), on the basis of our legitimate interests (security, abuse prevention, product improvement), and on the basis of your consent where required (e.g. optional Discord linking, which a player chooses to do in-game).

4. Sharing and processors

We share data only with the processors needed to run the service, under appropriate agreements:

• Stripe — payment processing.
• Discord — optional player account linking (OAuth).
• Hosting and database providers — to host the portal, bot and our PostgreSQL database (encrypted at rest).

5. Data retention

We keep account and server data for as long as your account is active. After cancellation or a period of account inactivity, data is retained for up to 90 days and then permanently deleted. If you reactivate within that window, your data is restored. Player data is tied to the server it belongs to and is removed when that server's data is deleted. Backups cycle out shortly after deletion.

6. Security

RCON traffic is encrypted in transit (TLS WebSocket) and RCON passwords are encrypted at rest. We apply reasonable technical and organisational measures to protect your data, though no system can be guaranteed 100% secure.

7. Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these rights, email hello@rcpceportal.nl. You also have the right to lodge a complaint with your local data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).

8. Cookies

We use only the cookies and local storage needed to keep you signed in and to make the portal work. We do not use third-party advertising or cross-site tracking cookies.

9. Children

The service is intended for server administrators and players who meet the minimum age to use Rust Console Edition and Discord in their region. It is not directed at children below that age, and we do not knowingly collect their data.

10. International transfers

Where data is processed outside the European Economic Area by our processors, it is protected by appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

11. Changes

We may update this policy. Changes are reflected by updating the "last updated" date above; where appropriate we will notify you.

12. Contact

Questions about your data or this policy? Email hello@rcpceportal.nl.