RaidRadarDeutsch

Privacy Policy

Last updated: 2 November 2026. The German version is authoritative.

RaidRadar is a private team app for the game Rust (PC). It helps a group of friends keep track of servers, wipes, enemies, tasks, the map and Rust+ devices together. The app is free, shows no ads and does not analyse your usage for analytics or advertising.

1. Controller

Kevin B., Germany
Email: [email protected]

2. Data we process

Account and sign-in

• Email address and password (stored only as a hash) if you sign in with email.
• If you sign in with Discord, Google or Steam: the identifier of that account and – depending on the service – email address, name and profile picture (Google and Discord) or your SteamID (Steam). From Google we only request the basic scopes openid, email and profile.
• Your player name, optionally your SteamID and BattleMetrics ID, and settings (e.g. notifications, completed introduction).

Group content

Everything you or your group members create in the app: servers, notes, tasks, events, resources, codes (stored encrypted), map markers, map images, chat messages, raid alerts, memberships and roles. Only members of the respective group can see this content.

Enemy tracking (data about other players)

Groups can watch players they know as opponents in the game. For this we store the publicly visible player name, the BattleMetrics ID and, where available, the SteamID of these players, when they were online or offline on a server according to BattleMetrics (up to 90 days back), and notes by the group. This data comes from publicly available BattleMetrics information or from the group's own input and is only visible to that group. If you are a watched player and want your data deleted, contact us.

Rust+

If you connect Rust+, we store your Rust+ access token encrypted, plus data about your paired servers and devices (switches, alarms, storage monitors), team status and team chat. The Steam sign-in for this happens directly with Steam/Facepunch; we end the resulting Steam session immediately and keep only the Rust+ token (valid for about 14 days).

Notifications

If you turn on push, we store a delivery address for your device (web push subscription or Firebase token of the Android app) and a device name such as “Android · Chrome”.

Technical data

• When you open the web app, our hosting provider processes technically necessary data such as IP address and time.
• On your device, the app stores your sign-in and a copy of the most recently loaded data (for offline use). There are no advertising or analytics cookies.

3. Purposes and legal bases

• Providing the app and your account (Art. 6(1)(b) GDPR).
• Enemy tracking and server data from public sources: the groups' legitimate interest in planning their game (Art. 6(1)(f) GDPR).
• Push notifications and the Rust+ connection: your consent by turning them on (Art. 6(1)(a) GDPR), revocable at any time in your profile.
• Security and troubleshooting (Art. 6(1)(f) GDPR).

4. Services we use

• Supabase (Supabase Inc.) – database, authentication and file storage; servers in Frankfurt am Main (EU).
• Cloudflare (Cloudflare Inc.) – delivery of the web app, domain and forwarding of emails to our contact address.
• Brevo (Sendinblue SAS, France) – sending confirmation and password emails.
• Google Firebase Cloud Messaging (Google) – notifications to the Android app. Browser push uses the push service of your browser vendor (e.g. Google, Mozilla, Apple, Microsoft).
• Discord, Google, Steam – only if you choose one of them to sign in.
• BattleMetrics and RustMaps – we fetch public server, player and map data; we do not send your own account data there.
• Facepunch (Rust+ Companion) – only if you connect Rust+.

Background services (BattleMetrics queries, Rust+ connections, notifications, nightly backup) run on a privately operated computer in Germany. Some providers are based in the USA; transfers rely on the EU-US Data Privacy Framework or the providers' EU Standard Contractual Clauses.

5. Retention

• Account data until you delete your account (Profile → Delete account).
• Online/offline history of watched players: at most 90 days; server history (player counts) up to one year, without personal data.
• Backups: 14 days.
• Rust+ token: until it expires (about 14 days) or you disconnect Rust+.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Write to [email protected]. You can also lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (BayLDA).

7. Google user data

RaidRadar uses data from Google accounts only for sign-in (identifier, email address, name, profile picture). RaidRadar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell data or share it for advertising.

8. About Rust

RaidRadar is a private fan project and is not affiliated with Facepunch Studios. Rust is a trademark of Facepunch Studios.