Privacy Policy

The RustVault — Rust+ Pair Helper browser extension exists for a single purpose: to capture the Rust+ authentication token during the official Steam sign-in and link it to your own RustVault account, so you can pair Rust servers and receive raid alerts. This page explains exactly what it touches.

What data the extension handles

• Your Rust+ auth token — delivered by Facepunch's Rust+ login page when you sign in with Steam.
• Your SteamID — included in the same login payload.

That is the only data the extension reads. It does not read your browsing history, other tabs' content, passwords, or any unrelated pages.

When it runs

The extension is active only on two sites:

• companion-rust.facepunch.com — to receive the token from the Rust+ login page you opened yourself.
• rustvault.de — to mark the extension as installed and to deliver the token to your logged-in account.

It does nothing on any other website.

Where the data goes

The captured token and SteamID are sent only to your own RustVault account on rustvault.de, over HTTPS, using your existing login session. They are used solely to register with Facepunch's Companion API on your behalf so Rust+ pairing and alarm notifications work.

What is NOT done

• No data is sold, rented, or shared with third parties.
• No advertising, analytics, tracking, or profiling.
• Nothing is stored persistently inside the extension itself — it only passes the token through to your account.
• No remote code is loaded or executed.

Removing your data

You can disconnect Rust+ at any time on rustvault.de/pair (Disconnect clears the stored token), and you can remove the extension from your browser at any time. Deleting your RustVault account removes all associated data.

Contact

Questions about this policy or your data? Reach us via the RustVault site or Discord. See also the full RustVault privacy policy.