Who we are
Forgepoint runs the Forgepoint Rust servers, this website and our Discord. We are the controller of your personal data. For anything about your data, email privacy@forgepoint.xyz.
Email: support@forgepoint.xyz
What we collect
- Account: your Discord ID, username, avatar and email address, and your Steam ID, name and avatar when you link Steam.
- Purchases: what you bought, when, the amount, your subscription status and the consent you gave at checkout. Stripe handles your card details.
- Security: your IP address and, when you log in, link an account or check out, a device fingerprint made from browser and device characteristics. We use these to stop fraud and ban evasion, not to track you around the web.
- Gameplay and community: in-game stats for leaderboards, votes and points, staff applications, images you upload, and streamer channels you link.
- Discord: our Discord bot records moderation logs (deleted and edited messages, joins and leaves, voice activity and role changes), support tickets, in-game economy commands such as balance and pay, and giveaway entries.
How we use it and our lawful basis
- Purpose
- Create your account and log you in
- Data
- Discord ID, username, avatar, email; Steam ID, name, avatar
- Lawful basis
- Contract
- Purpose
- Take payments, deliver perks and items, run subscriptions
- Data
- Account data, purchase and subscription records, your checkout consent
- Lawful basis
- Contract
- Purpose
- Email receipts, payment reminders and cancellation confirmations
- Data
- Email address, subscription details
- Lawful basis
- Contract and legal obligation
- Purpose
- Keep tax and accounting records
- Data
- Transaction records
- Lawful basis
- Legal obligation
- Purpose
- Prevent fraud, payment abuse and ban evasion
- Data
- IP address, device fingerprint, account IDs, ban records
- Lawful basis
- Legitimate interests (keeping our community and payments safe)
- Purpose
- Moderate our Discord and game servers, run support tickets
- Data
- Discord messages and activity logs, support ticket records, ban records
- Lawful basis
- Legitimate interests (running a safe community) and legal obligation (online safety)
- Purpose
- Answer emails you send us
- Data
- Your email address, name, message and attachments, and our replies
- Lawful basis
- Legitimate interests (answering your questions) and contract (help with a purchase)
- Purpose
- Announce purchases publicly and show leaderboards
- Data
- Discord or Steam name, product name, in-game stats
- Lawful basis
- Legitimate interests (you can opt out of announcements at checkout)
- Purpose
- Vote rewards
- Data
- Steam ID, vote records, points
- Lawful basis
- Contract
- Purpose
- Vote reminder messages
- Data
- Discord ID
- Lawful basis
- Consent (off unless you turn them on)
- Purpose
- Streamer features and staff applications
- Data
- Linked Twitch, Kick or YouTube channel; your application answers
- Lawful basis
- Contract (streamers) and legitimate interests (recruiting staff)
- Purpose
- Count guide views
- Data
- A one-way hash of your IP address
- Lawful basis
- Legitimate interests (knowing which guides help)
Where we rely on legitimate interests, you can object (see Your rights). Where we rely on consent, you can withdraw it at any time.
Automated checks
When you log in, link an account or check out, we automatically compare your account IDs and device fingerprint with our ban list. We never ban by IP address. An exact match with a banned account or device can automatically block you from buying or logging in. Close but inexact matches are never acted on automatically. A member of staff reviews them.
If you think you've been blocked by mistake, email privacy@forgepoint.xyz and a person will review the decision.
What other people can see
- Purchase announcements: by default we post your name and what you bought in Discord and in-game. Tick "Don't announce my purchase publicly" at checkout to opt out.
- Leaderboards: your Steam name and in-game stats.
- Top voters: the vote page lists this month's top voters by Steam name (or Discord display name) and number of votes.
- Streamer pages: your channel, if you link one.
International transfers
Some providers above (including Stripe, Discord, Valve, Cloudflare, Resend, Twitch and Google for YouTube) process data in the United States or other countries outside the UK. When they do, we rely on the UK-US data bridge where the provider is certified under it, or otherwise on the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Data
- Device fingerprints not linked to a ban
- How long
- 90 days from when we last saw the device
- Data
- IP addresses (account, login sessions, account linking)
- How long
- 12 months
- Data
- Identifiers linked to a ban (account IDs, device fingerprints)
- How long
- For as long as the ban lasts
- Data
- Transaction records and the log of payment emails (recipient, amount, date, text sent)
- How long
- 6 years (HMRC requirement and evidence of required payment notices)
- Data
- Staff applications we turn down
- How long
- 12 months after we make a decision
- Data
- Accepted staff applications
- How long
- While you hold the role they gave you
- Data
- Emails you send us and our replies
- How long
- 2 years from the last message (automatic messages such as bounces: 90 days)
- Data
- Support tickets
- How long
- Until we manually clear them. We're introducing a 12-month limit
- Data
- Discord log channels
- How long
- Until we manually clear them. We're introducing a 90-day limit
- Data
- Guide view counts (hashed IP)
- How long
- 30 days
- Data
- Everything else (account, linked accounts, votes, points, uploads)
- How long
- Until you delete your account
When you delete your account, we delete your personal data except transaction records we must keep for tax purposes, which we anonymise where we can, and ban records while a ban lasts.
Your rights
You have the right to:
- get a copy of your personal data
- have inaccurate data corrected
- have your data deleted
- restrict how we use your data
- object to us using your data based on legitimate interests
- receive your data in a portable format
- withdraw consent at any time
- ask for a person to review an automated decision
The easiest way is the Privacy page on your dashboard, where you can download your data or delete your account. You can also email privacy@forgepoint.xyz or open a ticket on our Discord (opens in a new tab). We'll reply within one month.
If you have an active subscription, we'll keep the minimum data needed to deliver it until it ends, or you can cancel first.
Complaints
Contact us first so we can try to put things right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk (opens in a new tab) or on 0303 123 1113.
Age
Our services are for people aged 16 and over. If you believe someone younger has given us their data, email privacy@forgepoint.xyz and we'll delete it.
Security
We protect your data with access controls, encryption of sensitive fields and secure connections. No system is completely secure, so if something goes wrong we'll tell you and the ICO when the law requires us to.
Changes to this notice
If we make important changes we'll tell you on our website or Discord. The date below shows when this notice was last updated.