In short
The project processes SteamID64, public Steam data, email, order information and security data.
They are used for sign-in, payment, delivery, support, refunds and website protection.
Steam, Robokassa, hosting, game servers and Discord receive only necessary data; the project does not receive card details or a Steam password.
Email contact@grirust.ru for access, correction or deletion; required records may still be retained.
The data operator is self-employed Alexander Dmitrievich Grigorev, Tax ID 470605097392, Saint Petersburg. Privacy contacts: contact@grirust.ru.
GRI RUST processes SteamID64 and public Steam profile data; buyer email and limited Robokassa payment status data; orders, fulfillment, privileges and server events; IP address, user agent, security logs and necessary cookies; and support/Discord ticket content. It does not receive full bank card details, CVC/CVV or the Steam password.
Data is used for authentication, contract performance, payment confirmation, digital service delivery, support, refunds, fraud prevention and security. Legal grounds include contract performance, legal duties, legitimate security interests and consent where required.
Steam, Robokassa, hosting providers, the Rust game server and Discord receive only data needed for their role. Data is not sold. Account data is kept while the account exists and afterwards only where unfinished orders, law or a dispute require it. Orders, payments, receipts and delivery records are kept for contract, tax, accounting, refund and legal claim needs. Technical logs are kept while needed for security and troubleshooting, support requests while needed to resolve and evidence the response, and incident records through investigation and any applicable legal need. Data is deleted or anonymized when the relevant purpose ends. HTTPS, access control, CSRF protection, audit logs, backups and secret rotation are used.
Users may request access, correction, restriction, consent withdrawal or deletion where retention is not legally required by emailing contact@grirust.ru. The current edition is published at https://grirust.ru/legal/privacy.