Privacy Policy

Last updated: 29 October 2026

This policy explains how RustMatch ("we", "us") collects and uses your personal data when you use our website at rustmatch.com and app.rustmatch.com, and the RustMatch apps for iPhone and Android (together, the "Service"). RustMatch is run by Logan Murphy from Scotland, United Kingdom. We are the data controller for your personal data. You can contact us at hello@rustmatch.com.

Data we collect

Account data: email address and password (passwords are stored securely by our authentication provider; we never see them in plain text).
Profile data: username, age range, region(s), platform, languages, play styles, server types, hours played, squad size, mic preference, bio, profile photo, and similar gameplay preferences you provide.
Messages: the content of messages you send to other users you have matched with.
Payment data: on the website, payments are processed by Stripe. In the iPhone and Android apps, payments are processed by Apple (App Store) or Google (Google Play), and RevenueCat checks those purchases for us. RevenueCat receives your RustMatch user ID and your purchase history from the store. We receive your plan, its status and renewal date, and a customer reference. We never see or store your card details.
Notification data: if you allow notifications in the app, a push token for each of your devices and your notification choices (see Notifications below).
Activity: your swipes, likes, matches, blocks and when you were last active, so we can build your deck and show who is online.
Reports: if you report someone, or someone reports you, we keep the report, its reason, any details added and the usernames involved.
Technical data: on the website, IP address, device and browser information, and usage data, including via cookies and similar technologies.

How we use your data and our legal bases

To provide the Service (create your profile, match you with other players, enable messaging), performance of our contract with you.
To process subscriptions and payments, performance of our contract and compliance with legal obligations.
To keep the Service safe (prevent abuse, moderate content, enforce our Terms), our legitimate interests and legal obligations.
To send service emails (account, security, subscription), performance of our contract.
To send marketing emails, your consent, which you can withdraw at any time.
Analytics and advertising measurement on the website, your consent, where required. The phone apps have none.

Who we share data with

We share data with service providers who process it on our behalf, under appropriate contracts:

Supabase, database, authentication, and storage.
Stripe, payment processing on the website.
Apple and Google, payment processing for purchases in the apps, and delivery of push notifications (Apple Push Notification service and Firebase Cloud Messaging).
RevenueCat, checking and keeping track of purchases made in the apps.
Expo, sending push notifications to the apps.
Loops, email delivery, including alerts to our moderator when a report is filed.
Netlify, website hosting.

Some providers are based outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent. We do not sell your personal data.

Notifications

If you allow notifications, the app stores a push token for each device so it can tell you about new matches, messages, likes and clan activity. Notifications pass through Expo and then Apple Push Notification service (iPhone) or Firebase Cloud Messaging (Android). A message notification shows the start of the message. You can turn each type off in the app's Settings, or turn them all off in your phone's settings. Tokens are deleted when you log out of the app or delete your account.

Cookies and tracking

On the website we use cookies and similar technologies that are necessary to run the Service (for example, to keep you signed in). With your consent, we may also use analytics and advertising measurement cookies. You can manage non-essential cookies through the consent options on the website.

The iPhone and Android apps use no cookies, no advertising and no analytics or tracking. We do not track you across other apps or websites.

How long we keep your data

We keep your data for as long as your account is active.

When you delete your account, your profile is hidden from other players straight away. Your account and personal data, including your photos, messages and push tokens, are permanently deleted within 30 days, and we ask RevenueCat to delete its record of you. If you log in before then, you can choose to keep your account. See how to delete your account.

Some information is kept after deletion:

Reports filed by you or about you, with the usernames at the time, are kept to keep the Service safe and to deal with repeat offenders.
Payment records are kept by Stripe, Apple or Google as tax and accounting law requires.
Anything we must keep to meet other legal obligations.

Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent. To exercise these rights, contact hello@rustmatch.com. You can delete your account at any time from Settings in the app or on the website. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Age and younger users

You must be 16 or over to use RustMatch. We take extra care with players aged 16 and 17: they are never shown to players aged 30 and over, and the other way round. If you believe a child under 16 has given us personal data, contact us and we will delete it. Read our Child Safety Standards.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date above. If changes are significant, we will take reasonable steps to notify you.

Contact

Questions about this policy or your data: hello@rustmatch.com.