RustVault is a project run by Anian Moser, based in Vilshofen an der Donau, Germany. You can find all legally relevant information on the following pages:

• Legal Notice (Impressum) — Disclosures pursuant to § 5 DDG and § 18 (2) MStV
• Privacy Policy — Information pursuant to Art. 13 GDPR

Summary

• We store your SteamID64, public profile name, and avatar URL.
• We analyze the contents of publicly visible Steam inventories (Rust skins only).
• Price history is stored aggregated across all users.
• Session cookie is only set for logged-in users (30 days).
• Optional features you turn on (Rust+, Discord, the browser extension) process only the data they need — see the Privacy Policy.
• No analytics, no ads. We never sell your data or share it for advertising.

Logged-in users can wipe their data at any time via Settings → Delete my data. Users who are not logged in can request deletion of their SteamID data informally by emailing rustvault@gmx.de.

Prices & Signals

Prices come from the Steam Community Market and are provided for informational purposes only. BUY/HOLD/SELL signals are rule-based (30-day median & volatility) and do not constitute investment, trading, or financial advice.

Disclosures pursuant to § 5 of the German Digital Services Act (Digitale-Dienste-Gesetz, DDG) and § 18 (2) of the German Interstate Media Treaty (Medienstaatsvertrag, MStV).

Provider (Diensteanbieter)

Operator: Anian Moser
Address: Bajuwarenring 48, 94474 Vilshofen an der Donau, Germany
E-mail: rustvault@gmx.de
Website: www.rustvault.de

Business Purpose

Operation of an information and analytics platform for publicly available Steam and Rust game data. Aggregation and display of market prices, inventory valuations and player statistics, together with companion and community tools (Rust+ integration, a Discord bot, in-game utility tools and a browser extension).

Responsible for Content (§ 18 (2) MStV)

Responsible for content: Anian Moser, Bajuwarenring 48, 94474 Vilshofen an der Donau, Germany.
Basic orientation: RustVault is a non-editorial information platform displaying publicly available market-price and inventory data of the game Rust. The platform does not pursue any journalistic or political agenda.

Trademarks & Third-Party Rights

RustVault is an independent project and is not affiliated with Facepunch Studios Ltd. or Valve Corporation. Rust, Steam, and their associated logos are registered trademarks of their respective owners. All displayed price data is based on publicly accessible Steam Marketplace information and is provided for informational purposes only. The values shown on RustVault do not constitute investment, trading, or financial advice.

Consumer Dispute Resolution

Pursuant to § 36 of the German Consumer Dispute Resolution Act (VSBG): we are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board (Verbraucherschlichtungsstelle).

Disclaimer

The information provided on RustVault is researched and aggregated with the greatest possible care. However, no liability or guarantee is assumed for the timeliness, accuracy, or completeness of the price data. No liability is accepted for damages arising from the use or non-use of the information displayed.

The content of external links is reviewed at the time of linking. The operators of the linked pages are solely responsible for their content.

Copyright

All content on this website (texts, graphics, logos, layout, code) is subject to German copyright law (Urheberrechtsgesetz, UrhG). Reproduction, modification, or distribution beyond the limits of copyright law requires the prior written consent of the operator.

Correction Notice

Correction to the legal notice (Impressum) of rustvault.de
Date of change: 12 June 2026

• Corrected by: Tobias Sonnleitner
• Previous entry: Cevio e.U.
• New entry: Anian Moser, as media owner / service provider (Diensteanbieter)

Reason: The previous entry was incorrect. The actual operator of rustvault.de has been Anian Moser from the outset (domain, server, code, and content). Cevio e.U. / Tobias Sonnleitner was never the operator and appeared in the legal notice only by mistake. The entry has been corrected to name the party actually responsible.

Evidence of actual operator status (Anian Moser):

• Domain: rustvault.de is registered to Anian Moser.
• Code & content: developed and maintained by Anian Moser.
• Hosting / server: provided by World4You Internet Services GmbH; the hosting account remains with Cevio e.U.

Anian Moser has consented to being named as media owner / service provider.

Last updated: July 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Anian Moser
Bajuwarenring 48, 94474 Vilshofen an der Donau, Germany
E-mail: rustvault@gmx.de
Website: www.rustvault.de

2. General Information

We process personal data solely on the basis of the GDPR and the German Federal Data Protection Act (BDSG). Data is transferred to third countries only in the cases described below.

3. Hosting

This website is hosted by:
World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria.
The servers are located in Austria. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

4. Server Log Files

When you access this website, technical data is automatically recorded:

• IP address (shortened and/or deleted after 7 days)
• Date and time of access
• Requested URL, HTTP status code, amount of data transferred
• Referrer, user agent (browser, operating system)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security and error analysis).
Retention period: a maximum of 7 days, after which data is automatically deleted.

5. Cookies and Local Storage

We use cookies and local storage only to the extent required for the operation of the site or where you have expressly consented.

Strictly necessary cookies (no consent required, Art. 6(1)(f) GDPR):

• Session cookie for logged-in users (30 days)
• Consent storage (rustvault_consent) — your cookie choices
• Security / CSRF tokens

Non-essential cookies are only set after your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time via the “Cookie Settings” link in the footer.

6. Steam Login (OpenID)

For signing in, we offer login via Steam (OpenID 2.0), operated by the Valve Corporation, 10400 NE 4th St, Bellevue, WA 98004, USA.

During login, you are redirected to steamcommunity.com where you authenticate. Valve transmits only your public SteamID (a pseudonymous number) to us — no email address, no password, no real name.

We store:

• SteamID
• Public Steam display name and avatar URL (retrieved via the Steam Web API)
• Timestamps of registration and last login

Legal basis: Art. 6(1)(b) GDPR (performance of a contract — providing account functionality).
Third-country transfer: Valve is based in the USA. The transfer is based on the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
Retention period: until your account is deleted. You can delete your account at any time under Settings → Delete my data or request deletion informally by emailing rustvault@gmx.de.

Valve/Steam's privacy policy: store.steampowered.com/privacy_agreement

7. Steam Web API (Server-Side)

To display publicly available inventory and market data, we query the Steam Web API on the server side. No IP address or other personal information of our website visitors is transmitted to Valve — the request is made exclusively from our server.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the service).

8. Processing of Third-Party (Scanned) Profiles

RustVault aggregates and displays publicly available Steam and Rust game data about players — including those who are not registered users. A scanned profile is accessible at /p/:steamId and may appear in the leaderboard and the player dossier (/who).

Categories of data: SteamID, public display name and avatar, public inventory items and their market value, publicly visible Steam/Rust statistics (e.g. bans, account age, playtime, K/D), and aggregated server-activity data.

Purpose: to let Rust players assess the reputation and history of other players they encounter in-game (e.g. cheating/ban history, account age) — a common and legitimate need in the game's context.

Legal basis & balancing test (Art. 6(1)(f) GDPR): processing is based on our and our users' legitimate interest in providing this in-game intelligence. We restrict processing to data that the data subject (or Steam on their behalf) has already made publicly accessible, do not combine it with data from outside the gaming context, do not derive special-category data, and offer an easy opt-out. We consider this proportionate; the interests of data subjects are safeguarded by the opt-out below and by Steam's own privacy controls.

Right to object & opt-out (Art. 21 GDPR): you can have your profile removed at any time, even without an account:

• Use the “Remove this profile” link shown on any public profile page — this immediately deletes it and prevents re-listing, or
• email rustvault@gmx.de with the relevant SteamID.

Removed SteamIDs are placed on an internal suppression list so they are not re-added by future scans or lookups. See also our Terms of Service (Notice & Takedown).

9. Rust+ Companion Features

If you connect a Rust server via Rust+ (Facepunch's companion service), we process the data needed to provide the companion features you enable (live map, team chat, smart-alarm alerts, device control):

• A Rust+ authentication token and per-server pairing tokens, obtained when you sign in with Steam through Facepunch's Rust+ login. These let us receive pairing and alarm notifications and read the state of servers you have paired.
• Gameplay data of paired servers: server name, map and marker state, team-member positions and status, and in-game events (e.g. deaths, cargo, patrol helicopter, smart-alarm triggers).

This data powers only the companion features you turned on and is tied to your account. Tokens are exchanged with Facepunch's Rust+ service (companion-rust.facepunch.com, Facepunch Studios Ltd., United Kingdom).
Legal basis: Art. 6(1)(b) GDPR (performing the companion features you requested).
Retention / deletion: you can disconnect Rust+ at any time under Rust+ settings (which clears the stored token) or delete your account entirely under Settings.

10. Discord (Bot, Dashboard & Webhooks)

RustVault offers optional Discord integrations that process data only if you use them:

• Dashboard login (OAuth): to configure the RustVault Discord bot for your own server you can sign in with Discord. We request the identify and guilds scopes to read your Discord user ID and the servers you can manage — used only to show and save your bot settings. We do not read your messages.
• Webhooks: you may store a Discord webhook URL on your account. RustVault then sends the events you enabled (e.g. Rust+ server events, ban or price alerts) to that channel. You can remove it at any time on your account page.
• The bot runs in Discord servers that add it and replies to slash commands with public RustVault data.

These features involve Discord (Discord Netherlands B.V. / Discord Inc., USA); see discord.com/privacy.
Legal basis: Art. 6(1)(a)/(b) GDPR (your consent / provision of the requested feature). Transfer to the USA is covered by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

11. Browser Extension (Rust+ Pair Helper)

We offer an optional browser extension that links Rust+ to your RustVault account in one click. It runs only on the Rust+ login page (companion-rust.facepunch.com) and on rustvault.de, captures the Rust+ auth token during your own sign-in, and forwards it to your logged-in RustVault account over HTTPS — nothing else is read, stored or shared. Installing it is optional — you only add it if you want to link Rust+.
Full details are in the separate extension privacy policy.
Legal basis: Art. 6(1)(b) GDPR (performing the Rust+ linking you requested).

12. Contact by Email

If you contact us by email, we process your email address and the content of your message to handle your request.
Legal basis: Art. 6(1)(b) or (f) GDPR.
Retention period: until your request has been fully handled, and no longer than statutory retention obligations require.

13. External Services & Content Delivery Networks

We keep contact between your browser and third-party servers to a minimum:

• Rust item icons (sourced from cdn.rusthelp.com) are served through our own server — proxied and cached — so your IP address is not exposed to that CDN.
• SCMM (rust.scmm.app) item and collection data is fetched server-side; SCMM receives your IP only if you click a link to open their site.
• RustMaps (rustmaps.com) map data is fetched server-side; RustMaps receives your IP only if you click a deep-link to open a map there.

We embed no advertising, social-media plugins or tracking pixels, and no third party is contacted from your browser unless you actively click an external link.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing game data efficiently and privately).

14. SSL Encryption

This website uses TLS encryption (HTTPS) throughout to protect data in transit.

15. Your Rights

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of given consent (Art. 7(3) GDPR)

To exercise these rights, contact us informally at rustvault@gmx.de.

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our location is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 981 180093-0
E-mail: poststelle@lda.bayern.de
www.lda.bayern.de

17. Changes to This Privacy Policy

We will update this policy as legal or technical changes require. The current version is always available at www.rustvault.de/datenschutz.

Last updated: July 2026. These terms govern your use of RustVault (www.rustvault.de). By accessing or using the service you agree to them.

1. Scope & Operator

RustVault is operated by Anian Moser (Bajuwarenring 48, 94474 Vilshofen an der Donau, Germany). Full provider details are in our Legal Notice. Where a separate written agreement exists, that agreement takes precedence over these terms.

2. The Service

RustVault aggregates and displays publicly available Steam and Rust game data — profiles, bans, playtime, in-game statistics, inventory items and Steam Market prices — together with optional account features (watchlists, inventory tracking, Rust+ companion tools, in-game utility tools, a Discord bot and an optional browser extension). The service is provided “as is” and “as available”, without any warranty as to accuracy, completeness, timeliness or fitness for a particular purpose.

3. No Advice; Limitation of Liability

Price, value and signal data are informational only and do not constitute investment, trading, financial or legal advice. Any decisions you make based on the data are your own responsibility.

To the extent permitted by law, Anian Moser accepts no liability for damages arising from the use of, reliance on, or inability to use the service or the data it displays. This limitation does not apply to liability for damages resulting from injury to life, body or health, nor to damages caused intentionally or by gross negligence, nor to any other liability that cannot be excluded by mandatory law.

4. Acceptable Use

You may use RustVault only for legitimate, game-related purposes (e.g. checking the reputation of players you encounter in Rust). The following is strictly prohibited:

• Stalking, harassment, threats, intimidation or doxxing of any person.
• Identifying, locating or tracking real-world individuals, or using the data for any purpose outside the context of the game Rust.
• Automated mass-scraping, bulk extraction, or placing an unreasonable load on the service or its endpoints.
• Reselling, redistributing or commercially exploiting the data obtained through the service.
• Any use that is unlawful, infringes third-party rights, or attempts to circumvent security, rate limits or access controls.

RustVault is an intelligence tool for in-game decisions — not a means to harass or surveil people in real life. Misuse for harassment or off-game tracking is a serious violation of these terms.

5. Accounts

Account features require signing in with Steam. You are responsible for activity under your account. We may suspend or terminate accounts, and remove data, where we reasonably believe these terms have been violated — in particular in cases of abuse, harassment or automated scraping. You may delete your own account and data at any time under Settings → Delete my data.

6. Third-Party Data & Removal (Opt-out)

RustVault processes publicly available data about third parties (scanned players) on the basis of legitimate interest (Art. 6(1)(f) GDPR). If you are a player whose profile appears on RustVault, you can request removal at any time — directly from the “Remove this profile” link on any public profile page, or by emailing rustvault@gmx.de with the relevant SteamID. Removed profiles are placed on a suppression list so they are not re-listed. See our Privacy Policy for details and your full rights.

7. Notice & Takedown

Rights holders and affected individuals may send complaints or removal requests to rustvault@gmx.de. We review such requests and act on justified ones without undue delay. Please include enough detail (e.g. the SteamID, URL or specific content) for us to identify the matter.

8. Intellectual Property

Rust, Steam and their logos are trademarks of their respective owners; RustVault is independent and not affiliated with Facepunch Studios Ltd. or Valve Corporation. The RustVault name, design and code are protected and may not be reproduced beyond the limits of applicable copyright law without prior written consent.

9. Changes

We may amend these terms as legal or technical requirements change. The current version is always available at www.rustvault.de/terms; continued use after changes constitutes acceptance.

10. Governing Law

German law applies, to the extent permitted by mandatory consumer-protection rules. Place of jurisdiction is Vilshofen an der Donau, Germany, where legally permissible.