Privacy

What we collect

• From Steam when you sign in: your SteamID, display name, avatar, profile link, account creation date, VAC and game ban status, and your total Rust hours. If your profile hides your hours, we show "Hours hidden". We refresh this from Steam at most once a day.
• What you give us: your timezone, language, roles, the hours grid you mark, an optional Discord handle and an optional email address.
• What you do on the site: lobbies you post, applications and notes, squads you join, vouches you give and receive, flags and reports you raise, players you block, and notices we send you.
• Technical data: a request log with the route, status and timing of each request. It holds no query strings, cookies, session IDs or email addresses. The web server keeps its own access log.
• Usage counts: we record events such as "board viewed" or "application sent" against a hashed session identifier that cannot be traced back to you. They carry no name, email or SteamID and are used for weekly totals.

Why we use it

• To run the service (contract): sign-in, matching lobbies to your hours, applications, squads and your record.
• To keep it safe (legitimate interests): reports, insider flags, bans, the nightly check for vouch rings and the audit log.
• To email you (contract, and your settings): verification, applications, reminders and the vouch window. You can turn most of these off in Settings. Account and security email cannot be turned off.

We do not sell your data or show advertising.

Who can see what

• Public: your display name, avatar, Rust hours, ban status, account year, your record (wipes played, vouch rate, upheld flags) and your open lobby, on your player page.
• Your squad, after you confirm a slot: your Steam profile link and your Discord handle. A lobby's Discord invite is shown only to its squad.
• Never public: your email address, your hours grid, who voted for you, and the description and evidence of any flag against you.
• Moderators can see reports, flags, late exits and the account details needed to act on them. Every moderator action is recorded with a reason.

Who else handles it

• Valve (Steam): you sign in through Steam, and we read your public profile through the Steam Web API.
• Email provider: your address and the message are passed to our email provider to deliver notifications.
• Hosting and backups: the database lives on our own server, with an off-site backup copy.

Cookies

We use only essential cookies: a session cookie that keeps you signed in, a CSRF token that protects forms, and a tz cookie that remembers your timezone. There is no advertising or tracking cookie, so there is no cookie banner.

How long we keep it

• Your account data is kept while your account exists.
• When you delete your account we remove your name, avatar, profile link, email, Discord handle, hours, roles and settings straight away, and the vouches you received.
• Vouches you gave stay with no name attached, because they are part of other players' records.
• Moderation records (reports and flags about you, and restrictions) and the SteamID they depend on are kept for 12 months after deletion, and then the text is erased. The audit log refers to accounts by internal identifier only, so after deletion it no longer points to a person.
• Email records addressed to you are removed when you delete your account.

Your rights

You can download your data and delete your account yourself in Settings. You can also ask us to correct your data, restrict or object to how we use it, or send you a copy, by writing to hello@squadwipe.example.com. The download leaves out confidential moderator notes and anything that would identify another person, such as who voted for you or raised a flag. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).

Contact and changes

Write to hello@squadwipe.example.com. If we change this policy in a way that matters, we will say so on the site before it takes effect.