Privacy
Last updated 2026-04-26 · Plain English
What we log · Why · For how long
We log what we need.
Nothing more.
This page describes the data MistyWisp processes to run the server, keep it secure, and enforce the rules. There is no advertising, no analytics, and no third-party tracking. If you spot anything below that doesn't match reality, file a ticket in Discord and we'll fix it.
- 01
Overview
MistyWisp is a vanilla Rust dedicated server operated by individuals, not a company. We collect the minimum data needed to run the server, keep it secure, and enforce the rules. We do not sell, rent, or share data with advertisers.
- 02
What we collect
Two surfaces collect data: the website (this page) and the game server (RustDedicated). They are separate systems and the website never receives anything that could identify you in-game.
- Website access logs (nginx + FastAPI)
- IP address, user-agent, requested URL, response status, timestamp, request ID. Stored on the server filesystem.
- Game server logs (Rust)
- Steam ID, in-game name, IP, ping, chat messages, kills, deaths, build / decay events. Standard Facepunch retail logging.
- Ban records
- Steam ID, reason, issuing admin, issued-at and expires-at timestamps. Used to enforce the rules across wipes.
- Local storage on your device
- A single key, mistywisp.notice.v1, recording that you've dismissed the privacy notice. No tracking IDs, no profiles.
- 03
Why
Every category of data above maps to a specific operational need. We do not collect data for analytics, marketing, or profiling.
- Security
- IP-based rate limiting, brute-force detection, anti-DDoS triage.
- Rule enforcement
- Investigating reports, supporting bans, defending appeals with evidence.
- Service operation
- Routing, debugging, capacity planning. The website backend uses request IDs to trace a single request end-to-end when something fails.
- 04
Cookies & local storage
MistyWisp does not set tracking cookies, advertising cookies, or any third-party storage. The site uses local storage only to remember that you've dismissed the privacy notice. If we ever add analytics, you'll see a consent prompt before any non-essential storage is set.
- 05
Retention
We keep data for as long as the operational reason requires it, and no longer.
- Website access logs
- 30 days, then rotated and deleted.
- Game server logs
- Rolled at every wipe (max ~30 days).
- Ban records
- Indefinite. Active bans are required forever.
- Backups
- 28 days for daily snapshots, 6 months for monthly.
- 06
Sharing
We do not share data with third parties. Exceptions: (a) we honour valid legal requests from a competent authority, (b) we may share Steam IDs of confirmed cheaters with EAC and other vanilla communities so cheaters can't simply migrate. We never share IP addresses or chat logs outside the admin team.
- 07
Your rights (EU / UK)
If you're in the EU or UK, GDPR and UK GDPR give you specific rights over your personal data. We honour all of them within 30 days.
- Access
- Get a copy of what we hold on your Steam ID or IP.
- Correction
- Ask us to fix incorrect records (e.g. a wrong ban reason).
- Deletion
- Erase your data, except active ban records and security logs.
- Objection
- Push back on processing — we'll explain or stop.
- 08
Contact
All privacy requests go through the MistyWisp Discord ticket system. Replies are written, not in voice. If Discord is unavailable, leave a request in the in-game F7 report system with subject GDPR and an admin will reach out.
This notice is informational and written in plain English on purpose. It is not a contract. By using MistyWisp you agree to processing as described above; if you disagree, do not use the server. Changes will be reflected here with a new "Last updated" date.