⚡ The short version

We collect the minimum needed to run the games: your Discord identity when you log in, your gameplay records, anything you post in the chat room or support inbox, and — for security only — your IP address and device info. Raw security logs are swept out after 90 days and never displayed publicly. Chat messages self-delete after 24 hours. We don't sell data, we don't run ad trackers, and you can wipe your data yourself with one Discord command.

📥 What we collect

• Discord account basics — when you log in with Discord we receive your Discord ID, username and avatar. We never see your password, email inbox or private messages.
• Gameplay & economy records — plays, wins and losses, ticket/key balances, raffle entries, trades, transfers, purchases and deliveries. This is the ledger the games run on.
• Security log — when you log in or do something that moves currency, we record your IP address and basic device/browser information to detect abuse, fraud and account sharing. Requests that look like break-in attempts are also logged — whoever they come from — and the address is blocked for a while. When an account is permanently barred for abuse, a non-readable cryptographic fingerprint of addresses tied to that account may be retained to enforce the block without keeping the raw address in the permanent ban list.
• Chat & support — messages you post in the global chat room, with a snapshot of the name style, panel and emoji you had equipped (plus any ticket gifts sent before player-to-player sending was removed in September 2026); plus the support tickets you open and every reply in them. Moderation records (filter strikes, mutes, repeat-offense history) ride along to run the escalation ladder.
• Store purchases — the community store reports purchases with your Discord ID so the bot can credit them. That can create your balance record (tickets, MASO Badges) before your first login — it's waiting when you first sign in.
• Rust: Wipe Archive Card Event — if you use the Card Event, we keep your global card quantities, crate balance, daily-claim date, card opens, duplicate sales, completion status and the source that credited a crate or ticket sale. For Diamond Badge bonuses, we retain the Badge grant identifier and limited purchase metadata needed to award the crate once and prevent duplicates. Historical Discord Nuke bonus records may also retain their interaction and log-message IDs. The 150-card catalog itself is not personal data.
• Maso's Nuke Run — we keep the Badge tier spent, the configuration version, a request key used for replay protection, the selected board space, virtual reward and settlement fields, and permanent Nuke Runner nameplate ownership. These records stop retries from spending or paying twice and let the site replay the exact result after a disconnect.

🎯 How we use it

To run the games and raffles, keep balances correct, deliver items you've bought or won, show public win feeds and leaderboards (your Discord name, any cosmetics you've equipped, the game and what you won), run the Card Event and issue its one-time completion Store Credit award, run and moderate the chat room and support inbox (profanity filtering, spam strikes, mutes), and protect the economy from cheating and abuse. That's it.

🚫 What we don't do

• We never sell or rent your data to anyone.
• We never display IP addresses or device information publicly — their only use is owner-level abuse and fraud investigation.
• No third-party ad trackers or analytics scripts run on this site.

🛡️ How long we keep things

• Security entries (IP + device info) — up to 90 days; an automatic hourly sweep deletes older entries. They're never displayed publicly. Cryptographic address fingerprints used for permanent abuse blocks are kept for as long as the block remains.
• Chat messages — 24 hours, then they're deleted automatically. Short-lived moderation records (strikes, expired mutes, repeat-offense history) are swept on their own timers.
• Support tickets — kept while they're open and as history after they close, until you delete your data.
• Gameplay & economy records — kept while the community runs so balances, trades, Card Event ownership, Nuke Run replay records and prize deliveries stay correct. Card Event crate and completion-award records are removed when you delete your data, except that a currently pending paid-Nuke or Store Credit delivery must finish or be resolved first.

🍪 Cookies & sessions

We use a session cookie to keep you logged in, plus short-lived helper cookies during the Discord login handshake itself. Your browser also keeps a small local copy of your equipped skin so pages don't flash while loading — it's cleared when you log out. No advertising or cross-site tracking cookies.

🤝 Third-party services

• Discord — handles the login. Their own privacy policy applies to your Discord account.
• Game-server integration — checking your SCRAP balance or delivering items sends your Discord ID and the order details to the connected Rust Console game servers.
• Community store — purchases made through the community store are processed by the store provider; we receive the order (your Discord ID, what was bought) so the bot can credit or deliver it — even if you've never logged in here yet.
• Google Fonts — the site's typefaces load from Google's font servers; that's a standard font-file request from your browser, and no account data goes with it.

🗑️ Deleting your data

Run /delete-my-data in the MASO Discord server at any time. It erases your gameplay records, balances, MASO Badges, Card Event cards/crates/claims/opens/sales and completion records, Nuke Run spin history and Nuke Runner nameplate ownership, records, chat posts, support tickets, security-log entries, website profile and notifications, and strips your identity off shared history that has to stay for bookkeeping (past raffle wins, gift-card records). If anything of yours is still in motion — an open trade, game, order, paid-Nuke Card Event reward or Store Credit delivery — the command lists it and asks you to finish first, then run it again. There's also /data-opt-out, which stops the bot reading your SCRAP transfer messages (/data-opt-in reverses it). Questions — open a support ticket here on the site or in the MASO Discord and staff will help.

📮 Changes & contact

MASO Mini Games is a community project run by the MASO Rust Console community. If this policy changes, the new version is posted here with a new date. For anything privacy-related, contact the staff team in the MASO Discord server.