Privacy Policy

Last updated: July 22, 2026

RustGlass (rustglass.com) is an independent companion tool for the game Rust. This policy describes what data the service and the "RustGlass Pairing" browser extension handle, and why.

What we collect

Account link: your Steam ID and a Rust+ companion authentication token, created when you sign in through Facepunch's official Rust+ page. We never see your Steam username or password; the Steam login happens entirely on Facepunch's site.
Paired servers: the connection credentials Rust sends when you press "Pair" in-game (server address and your player token for that server).
Feature data you create: Smart Camera configuration and the player-sighting log entries it records, plus in-app settings.
Session cookie: one random identifier (rg_sid) that keeps you signed in. It stays anonymous unless you link Steam. Sessions and pairing data are stored in an encrypted server-side database.
Advertising measurement: when you arrive from one of our ads, the link's campaign tags (e.g. utm_source, an ad-click id) are stored with your session so we know which campaign brought you. While an ad campaign runs, the ad platform's measurement pixel (currently Reddit) may set its own cookie, and our servers may send the platform coarse conversion events (page visit, sign-up, trial started, subscription), never your Steam identity, server data or browsing inside the app. In the EU, UK, EEA and Switzerland this happens only after you accept the consent banner (legal basis: consent, Art. 6(1)(a) GDPR); declining stores only the plain campaign tag, shares nothing with anyone, and you can change your choice any time via "Privacy choices" in the page footer; withdrawal also deletes the stored ad identifiers.
Server logs: standard technical logs (IP address, request metadata) kept briefly for security and debugging.

The browser extension

The "RustGlass Pairing" extension runs only on companion-rust.facepunch.com and rustglass.com. Its sole function is to relay the Rust+ sign-in token from Facepunch's login page to RustGlass. The delivery target is hard-coded to rustglass.com. It reads nothing else, stores nothing, and contains no analytics or tracking of any kind.

How we use data

Solely to operate the service: connecting to your Rust servers through the official Rust+ companion API, showing live map, session and camera data, and delivering the alerts you configure. We do not sell data or show ads inside the app; the only third-party measurement is the advertising pixel described above, and only while a campaign runs.

Sharing

Data is shared only with the infrastructure that runs the service (our hosting provider and Cloudflare as a network proxy) and with Facepunch's Rust+ API, which receives requests made on your behalf. Ad platforms receive only the anonymous conversion events described above, never your Steam identity or in-app data. Nothing is sold to data brokers.

Retention & deletion

Your data is kept while your account is linked. Signing out removes the push registration. To have all stored data deleted, email [email protected] and we will remove it.

Security

All traffic is encrypted in transit (TLS). Tokens are stored on hardened servers with restricted access and are never exposed to your browser or other users.

Children

RustGlass is not directed at children under 13 and follows the age requirements of the game it accompanies.

Changes

We may update this policy as the service evolves; the date above always reflects the current version.

Contact

[email protected]

Rust and Rust+ are trademarks of Facepunch Studios. RustGlass is not affiliated with or endorsed by Facepunch Studios.