Privacy Policy

• Browsing the site needs no account and no sign-in.
• Two third parties see your visit: Google Analytics for traffic measurement, and Google AdSense for the ads that pay for the servers.
• Anything tied to you personally — an account, favourites, wipe alerts — exists only because you switched it on, and can be switched back off.
• No data is sold.

Analytics. Google Analytics runs on every page. It records the usual visit-level information — pages viewed, approximate location, device and browser, how you arrived — so we can see which parts of the site are worth keeping. It sets its own cookies.

Advertising. Google AdSense serves the ads on the site. Google and its ad partners may set and read cookies or similar identifiers in your browser to measure ads and, where permitted, to personalise which ads you are shown — including based on your activity on other sites. WipeRadar does not receive or store the data Google collects for this.

A device cookie. The first time you use a feature that has to remember something, a random device identifier is stored in a cookie named wr_device. It is a random string with nothing about you in it. It exists so that starring a server or turning on notifications does not first require signing in.

Account data, if you sign in. Signing in with Discord or Steam stores an account record and the identity you linked: for Discord, your Discord user id, username and avatar; for Steam, your SteamID, persona name, avatar, profile URL and whether your profile is public. No password is ever involved — both are OAuth sign-ins. Your session is a cookie named wr_session, and only a hash of the session token is kept on the server, never the token itself.

Favourites. Servers you star are kept in your browser's local storage, and — for the device or account that starred them — in the site's database, so they follow you to another device once you sign in.

Notification subscriptions. If you turn on browser notifications, your browser hands the site a push subscription: an endpoint URL at your browser vendor's push service (Google, Mozilla, Apple or Microsoft) plus two keys. Those are stored encrypted and used for one thing — sending the wipe alerts you asked for. Alongside them we store which servers you subscribed to and whether delivery is failing, so dead subscriptions can be retired.

Steam presence, if you connect Steam. When a Steam account is linked and its profile is public, the site records which Rust server that account is currently on, so your account page can show it and suggest servers you actually play. Keep your Steam profile private and none of this is visible to us.

Ordinary server logs and rate limiting. Like any website, your requests reach a web server, and request counts are tracked briefly to stop one client from hammering the API.

• Google AdSense — serves the ads, and may use cookies for ad measurement and personalisation.
• Google Analytics — traffic measurement.
• Discord and Steam — only if you choose to sign in with one of them, or opt into Discord notifications.
• Your browser's push service — only if you turn on browser notifications; it is what physically delivers them.

Each of these has its own privacy policy, which governs what they do with what they collect. The public Rust server data shown on the site comes from Valve's Steam Web API and from the game servers themselves; that is information about servers, not about you.

• Ad personalisation. Google's Ads Settings page (adssettings.google.com) turns personalised ads off for your Google account.
• Cookies generally. Every browser can block or clear cookies, per site or entirely. Blocking them costs you nothing here except favourites and staying signed in.
• Analytics. Blocking third-party scripts, or Google's own opt-out browser add-on, stops Analytics collecting anything.
• Notifications. Revoke the notification permission in your browser's site settings, or remove the alert from your account page. Either one stops delivery, and a subscription the browser has revoked is detected and retired on its own.
• Your account. Sign out from the account menu, and remove any favourites or alerts you no longer want. To have the account itself deleted, ask on Discord and it will be removed.

Sign-in sessions expire after 90 days and expired ones are deleted automatically. The device cookie lasts up to 400 days, after which the browser drops it and you become a new, unrelated device. Favourites and notification subscriptions are kept until you remove them or the account is deleted; a push subscription the browser has thrown away is retired as soon as delivery fails permanently. Whatever Google holds for analytics and advertising is subject to Google's retention policies, not ours.

Public server data — names, populations, wipe history — is kept indefinitely, because that history is what makes the predictions work. None of it describes a visitor.

WipeRadar is not directed at children, and no account here is intended for one.

This policy will change as the site does; the date at the top is when it last did. Questions, or a request to remove your data, go to the Discord server — there is no support email address.

Join the WipeRadar Discord →

See also the terms of use and how the tracker works.