Lucid Rust

Privacy Policy

LAST UPDATED 26 JULY 2026

Who is responsible

This policy covers the Lucid Rust website and game servers, operated by Moritz Breitmoser Development. For any question about your data, or to exercise the rights listed at the bottom of this page, contact lucidrust@boomilei.de. Our full contact details are on the imprint page.

Signing in with Steam

You sign in through Steam's OpenID service. We never see your Steam password — Steam confirms your identity to us and we receive your 64-bit Steam ID, your public profile name and your avatar image URL. We store these so we can recognise your account, show your name in-game and on the leaderboard, and apply any staff permissions you hold.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) — you cannot use an account-based service without an account.

Linking Discord

Linking your Discord account is optional. If you do, we store your Discord user ID so we can match your in-game account to your Discord account for roles, support and rewards. We do not read your messages and we do not receive your email address. You can ask us to unlink it at any time.

Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

What our game servers record

Playing on a Lucid Rust server produces data the same way any multiplayer server does. We record:

  • Sessions — the times you connect and disconnect, which server you joined, the name you played under, and the IP address you connected from.
  • Chat messages sent in public and team chat on our servers.
  • Combat events — kills and deaths, including weapon, distance and the players involved.
  • Statistics derived from the above: playtime, kill/death ratio, and leaderboard standings per wipe.
  • Reports filed by or against you, and the moderation record that follows from them.
  • Bans and mutes, including the reason, the duration, and which staff member issued them.
  • Staff notes about your account, written by moderators for moderation purposes.

IP addresses

We want to be explicit about this one, because it is the most sensitive thing we store. Connection IP addresses are kept alongside your sessions.

IP data is visible only to staff who hold moderation permissions, and it is never shown to other players or published anywhere on the site.

Cookies

We set exactly one cookie, lr_token. It holds your signed session token, lasts seven days, and is marked HttpOnly and Secure, so it cannot be read by scripts in your browser. It exists solely to keep you signed in. Deleting it, or logging out, ends the session.

We do not use analytics, advertising or tracking cookies, and we do not embed third-party trackers. Because the only cookie we set is strictly necessary for a service you asked for, no consent banner is required.

Server logs

Our hosting provider, Vercel and Hetzner, records standard access logs when you load the site: IP address, timestamp, requested URL, referrer and browser user agent. These are used for security and troubleshooting.

Third parties we send data to

  • Valve (Steam)— handles sign-in and supplies your public profile data. Your avatar image is loaded from Steam's content servers, so your browser contacts them when a page shows one.
  • Discord — only if you choose to link your account, and only for that linking flow.
  • RustMaps — supplies the map previews shown on server pages. This is a request for map data, and carries no information about you.

We do not sell your data, and we do not share it with anyone else except where we are legally required to.

Your rights

Under the GDPR you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing we base on legitimate interest, and ask for your data in a portable format. Write to lucidrust@boomilei.de and we will respond within one month.

Deletion has one limit worth knowing in advance: if you are banned, we will keep the minimum record needed to keep that ban enforceable. Everything else can go.

If you think we have handled your data badly, you can complain to your local data protection authority.

Changes

We will update this page when what we do with your data changes, and we will move the date at the top when we do. Material changes will be announced in our Discord.