Apex Rust

1. Overview

This Privacy Policy explains what personal data Apex Rust (the "Store") collects when you buy something or log in, why we collect it, and what rights you have over it. We collect the minimum needed to deliver your purchase, prevent fraud, and provide support.

2. Data We Collect

SteamID64 — either from your Steam login, or typed in at checkout for guest purchases. Used to deliver Products to the correct in-game account.
Email address — collected by Stripe during checkout, used for order confirmations and support.
Order & subscription history — what you bought, when, and how much, kept as our sales/accounting record.
Public Steam profile info — display name, avatar, and profile URL, shown back to you on your own Account page after Steam login.
Basic technical data — standard web request data (e.g. IP address) processed by our hosting provider for security and abuse prevention.

We never see or store your full card number, expiry date, or CVC — that goes directly to Stripe.

3. How We Use It

To process payment and deliver the Product you purchased;
To verify your identity when you log in with Steam;
To provide support and investigate refund/chargeback requests;
To detect and prevent fraud or abuse of the Store; and
To meet our legal and accounting obligations.

We do not sell your data, and we do not use it for advertising.

4. Third Parties We Share Data With

Stripe — processes all payments and handles your card details directly; see Stripe's Privacy Policy.
Valve/Steam — used for the optional "Login with Steam" feature; see Valve's Privacy Policy.
Cloudflare — hosts the Store and its database.

We share only what each provider needs to do its job — we don't sell or rent your data to anyone else.

5. Cookies & Local Storage

The Store uses a small number of essential cookies for admin and player login sessions — these are required for the Store to function and aren't used for tracking or advertising. Your shopping cart is kept in your browser's local storage, not on our servers, until checkout.

6. Data Retention

We keep order and subscription records for as long as needed for accounting, tax, and fraud-prevention purposes, and to resolve any disputes. You can ask us to delete other account data (see Section 7) at any time, subject to what we're legally required to keep.

7. Your Rights

If you're in the UK or EU, you have rights under UK/EU GDPR including the right to access, correct, or request deletion of your personal data, restrict or object to certain processing, and receive your data in a portable format. To exercise any of these, contact us at admin@apexrust.co.uk. If you're unhappy with how we've handled your data, you can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Children's Privacy

The Store isn't directed at children, and purchases by anyone under 18 must involve a parent or guardian (see our Terms of Service). We don't knowingly collect more data from a minor than is needed to fulfil an order made with guardian consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time; the "Last updated" date above reflects the current version. Material changes will be reflected here.

10. Contact

Questions about this Privacy Policy or your data should go to admin@apexrust.co.uk or our Discord server.