Privacy
Policy

The Island Rust Community ("we", "us", "our") is the data controller for personal data collected through our website and services. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection law.

When you use our account linking service, we collect and store the following data:

• Your Discord User ID (a numeric identifier assigned by Discord)
• Your Steam ID (a numeric identifier assigned by Steam/Valve)
• The timestamp of when you linked your accounts
• Records of rewards (case keys, credits) given to your account

We do not collect your username, email address, messages, friends list, payment details, or any other personal information beyond the identifiers listed above.

We process your data on the basis of legitimate interest (Article 6(1)(f) GDPR) — specifically to operate our game servers, provide linked account features, and handle support requests. The processing is necessary and proportionate to these purposes.

Your Discord ID and Steam ID are used solely for:

• Verifying your identity when opening support tickets in our Discord
• Applying in-game perks and rewards tied to your linked account
• Administering bans, unbans, and other moderation actions
• Cross-referencing with BattleMetrics for anti-cheat and moderation purposes

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your Steam ID may be shared with BattleMetrics (a game server administration platform) for moderation purposes. All other data remains within our own systems.

We retain your linked account data for as long as you remain a member of the community. If you unlink your account, your Discord ID and Steam ID link record is deleted immediately. Reward records (which keys/credits you received) are retained for anti-fraud purposes for up to 12 months. You may request full deletion at any time.

We use a session cookie (named ti.sid) to maintain your login state while using the account linking service. This is a strictly necessary cookie and does not require consent under PECR. We also use a preference cookie (ti_linked) to remember that you have already linked your account, preventing unnecessary re-authentication. No tracking, advertising, or analytics cookies are used.

Under GDPR you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, please contact us via Discord. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption in transit, httpOnly and SameSite session cookies, rate limiting on authentication endpoints, and regular security reviews of our codebase.

We may update this Privacy Policy from time to time. We will notify users of significant changes through our Discord server. Continued use of our services after changes constitutes acceptance of the updated policy.