RustVault is a project of Cevio e.U., based in Vienna, Austria. You can find all legally relevant information on the following pages:

• Legal Notice (Impressum) — Disclosures pursuant to § 5 ECG, § 14 UGB, § 25 MedienG
• Privacy Policy — Information pursuant to Art. 13 GDPR

Summary

• We store your SteamID64, public profile name, and avatar URL.
• We analyze the contents of publicly visible Steam inventories (Rust skins only).
• Price history is stored aggregated across all users.
• Session cookie is only set for logged-in users (30 days).
• No analytics, no ads, no sharing with third parties.

Logged-in users can wipe their data at any time via Settings → Delete my data. Users who are not logged in can request deletion of their SteamID data informally by emailing contact@cevio.at.

Prices & Signals

Prices come from the Steam Community Market and are provided for informational purposes only. BUY/HOLD/SELL signals are rule-based (30-day median & volatility) and do not constitute investment, trading, or financial advice.

Disclosures pursuant to § 5 of the Austrian E-Commerce Act (ECG), § 14 of the Austrian Commercial Code (UGB), and § 25 of the Austrian Media Act (MedienG).

Media Owner & Operator

Operator: Tobias Sonnleitner
Company: Cevio e.U.
Address: Stadlergasse 9a/3, 1130 Vienna, Austria
E-mail: contact@cevio.at
Website: www.rustvault.de · www.cevio.at

Business Purpose

Operation of an information and analytics platform for publicly available Steam inventory data of the game Rust. Aggregation and display of market prices, inventory valuations, and statistics.

Trade & Commercial Information

Trade authorization: Services in automatic data processing and information technology (unregulated trade / freies Gewerbe)
Trade authority: Magistrate of the City of Vienna (Magistrat der Stadt Wien)
Memberships: Austrian Federal Economic Chamber — Vienna branch (Wirtschaftskammer Wien), Professional Group for Management Consulting, Accounting, and Information Technology (UBIT)
Applicable regulations: Austrian Trade Act (Gewerbeordnung / GewO), available at www.ris.bka.gv.at
VAT: Exempt from VAT pursuant to § 6 para. 1 no. 27 of the Austrian VAT Act (small business scheme / Kleinunternehmerregelung) — therefore no VAT ID and no VAT shown on invoices.

Disclosure pursuant to § 25 Media Act

Media owner: Tobias Sonnleitner, Cevio e.U., 1130 Vienna.
Basic orientation: RustVault is a non-editorial information platform displaying publicly available market-price and inventory data of the game Rust. The platform does not pursue any journalistic or political agenda.

Trademarks & Third-Party Rights

RustVault is an independent project and is not affiliated with Facepunch Studios Ltd. or Valve Corporation. Rust, Steam, and their associated logos are registered trademarks of their respective owners. All displayed price data is based on publicly accessible Steam Marketplace information and is provided for informational purposes only. The values shown on RustVault do not constitute investment, trading, or financial advice.

EU Online Dispute Resolution

The European Commission provides a platform for online dispute resolution (ODR): ec.europa.eu/consumers/odr. We are neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.

Disclaimer

The information provided on RustVault is researched and aggregated with the greatest possible care. However, no liability or guarantee is assumed for the timeliness, accuracy, or completeness of the price data. No liability is accepted for damages arising from the use or non-use of the information displayed.

The content of external links is reviewed at the time of linking. The operators of the linked pages are solely responsible for their content.

Copyright

All content on this website (texts, graphics, logos, layout, code) is subject to Austrian copyright law. Reproduction, modification, or distribution beyond the limits of copyright law requires the prior written consent of the operator.

Last updated: April 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Cevio e.U.
Owner: Tobias Sonnleitner
Stadlergasse 9a/3, 1130 Vienna, Austria
E-mail: contact@cevio.at
Website: www.rustvault.de

2. General Information

We process personal data solely on the basis of the GDPR and the Austrian Data Protection Act (DSG). Data is transferred to third countries only in the cases described below.

3. Hosting

This website is hosted by:
World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria.
The servers are located in Austria. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

4. Server Log Files

When you access this website, technical data is automatically recorded:

• IP address (shortened and/or deleted after 7 days)
• Date and time of access
• Requested URL, HTTP status code, amount of data transferred
• Referrer, user agent (browser, operating system)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security and error analysis).
Retention period: a maximum of 7 days, after which data is automatically deleted.

5. Cookies and Local Storage

We use cookies and local storage only to the extent required for the operation of the site or where you have expressly consented.

Strictly necessary cookies (no consent required, Art. 6(1)(f) GDPR):

• Session cookie for logged-in users (30 days)
• Consent storage (rustvault_consent) — your cookie choices
• Security / CSRF tokens

Non-essential cookies are only set after your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time via the “Cookie Settings” link in the footer.

6. Steam Login (OpenID)

For signing in, we offer login via Steam (OpenID 2.0), operated by the Valve Corporation, 10400 NE 4th St, Bellevue, WA 98004, USA.

During login, you are redirected to steamcommunity.com where you authenticate. Valve transmits only your public SteamID (a pseudonymous number) to us — no email address, no password, no real name.

We store:

• SteamID
• Public Steam display name and avatar URL (retrieved via the Steam Web API)
• Timestamps of registration and last login

Legal basis: Art. 6(1)(b) GDPR (performance of a contract — providing account functionality).
Third-country transfer: Valve is based in the USA. The transfer is based on the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
Retention period: until your account is deleted. You can delete your account at any time under Settings → Delete my data or request deletion informally by emailing contact@cevio.at.

Valve/Steam's privacy policy: store.steampowered.com/privacy_agreement

7. Steam Web API (Server-Side)

To display publicly available inventory and market data, we query the Steam Web API on the server side. No IP address or other personal information of our website visitors is transmitted to Valve — the request is made exclusively from our server.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the service).

8. Publication of Scanned Profiles

Every scanned profile is publicly accessible at /p/:steamId and appears in the leaderboard. This matches the scope in which Steam itself makes this data publicly available. Removal from the public area is possible at any time (see deletion).

9. Contact by Email

If you contact us by email, we process your email address and the content of your message to handle your request.
Legal basis: Art. 6(1)(b) or (f) GDPR.
Retention period: until your request has been fully handled, and no longer than statutory retention obligations require.

10. Embedded Third-Party Content

This website currently embeds no external media (YouTube, Maps, social plugins). Should such embeddings be added in the future, they will only load after your explicit consent (two-click solution), and this privacy policy will be updated accordingly.

11. SSL Encryption

This website uses TLS encryption (HTTPS) throughout to protect data in transit.

12. Your Rights

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of given consent (Art. 7(3) GDPR)

To exercise these rights, contact us informally at contact@cevio.at.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at
www.dsb.gv.at

14. Changes to This Privacy Policy

We will update this policy as legal or technical changes require. The current version is always available at www.rustvault.de/datenschutz.