Privacy policy

This is a translation for convenience. The French version is the reference.

This policy explains how Zero Grief processes the personal data of the site’s visitors, the server’s players and the store’s buyers, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés). We collect as little data as possible.

Data controller

The Zero Grief team. Contact: the Contact page.

What we process, and why

When you visit the site

• Technical data: IP address, date and time, requested page, browser. We use it to run the site, protect it against abuse (rate limiting, blocking malicious bots) and diagnose outages. To show you the site in French or English, we also use the language set in your browser and, when the site runs behind Cloudflare, the country of your connection as given by the network: this choice is made on the fly, at each visit, and nothing is stored. Legal basis: our legitimate interest in keeping the site secure and showing it in your language. Anti-abuse counters are kept in memory for a few minutes to a few hours. Web server logs, if any, are kept for 6 months at most.
• Language cookie: if you choose your language yourself with the FR / EN switch, a lang cookie (fr or en) remembers that choice for 1 year, and nothing else. Legal basis: your own request, since it only keeps the choice you made (it is exempt from consent).
• No other cookie, no tracker, no audience measurement (see the Cookies page).

When you write to us (contact form)

• Data: in-game name, email address, the content of your message and, if you give them, your Discord username and your SteamID64.
• Why: to handle your request and reply to you.
• Legal basis: our legitimate interest in answering the messages sent to us, or steps taken at your request before entering into a contract.
• How long: 1 year at most after our last exchange, then deleted.
• Recipients: only the team members in charge of support. Messages reach them through a messaging service run by a provider based in the United States (see “Transfers outside the European Union”).

When you play on the server

• Data: Steam ID (SteamID64), player name, connection IP address, connection dates, chat messages and in-game actions recorded in the server logs, game language.
• Why: to run the server and its rules (PvE protections, ownership of loot and bases), fight cheating, enforce sanctions, and show the game in your language.
• Legal basis: performance of the service you use by joining the server, and our legitimate interest in protecting it.
• How long: logs are kept for 6 months at most; in-game progress is erased at every wipe; sanctions are kept as long as they are in force.

When you buy from the store

• Payment takes place on Tebex Limited, the official reseller, which processes your order and payment data (email, payment method, country, IP address, Steam login) as a separate data controller, under its privacy policy. We never have access to your bank details.
• For delivery, Tebex only sends us what is needed: your SteamID64, your player name, the product bought and the transaction number. This data is processed to carry out the delivery, in line with our contract with Tebex, and does not leave our servers. The game server keeps the history of your purchases and of your claims, to deliver, avoid double deliveries and handle refunds.
• Legal basis: performance of the contract, and our legal obligations, in particular accounting obligations.
• How long: as long as your store account is useful, then at most for the time required by our legal obligations (10 years for accounting records).

What we do not do

• We do not sell or rent any data.
• We do no targeted advertising and no profiling.
• No automated decision is made about you, apart from the game rules themselves (PvE protections, anti-cheat).

Transfers outside the European Union

• The messaging service that passes contact form messages on to the team is provided by a company based in the United States. This transfer is covered by the EU–US Data Privacy Framework. On request, we will tell you the name of this provider.
• Tebex Limited is based in the United Kingdom, a country recognized by the European Commission as offering adequate protection.

Your rights

You can ask to access your data, to have it rectified or erased, to restrict its processing, to object to processing based on our legitimate interest, and to ask for its portability when the processing is based on the contract. Write to us from the Contact page. For a request about the game server, give your SteamID64. We reply within one month.

If you believe your rights are not respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).

Security

The site is served over HTTPS, has no user accounts or passwords to store, and has protections against bots and abuse. Access to the servers is limited to the team.

Minors

Rust is not recommended for anyone under 16. If you are under 15, ask a parent to contact us for any request about your data.