Cookie Policy

The rustontop.com website sets no advertising cookies and no cross-site tracking cookies. It uses two strictly necessary cookies: one that keeps you signed in and one short-lived cookie that protects the Discord connection flow. Our traffic analytics works without cookies.

EU law requires a consent banner only for cookies that are not strictly necessary, so the site does not show one.

Both cookies are first-party, are never used for advertising or profiling, and cannot be read by other sites:

• rot_session keeps you signed in after you sign in with Steam. It holds your Steam ID in a tamper-proof signed token (no password, no profile data). The site sets it only when you sign in, it lasts up to 30 days, and signing out deletes it.
• rot_discord_state protects the optional "Connect Discord" flow against cross-site request forgery. It holds a random one-time value, the site sets it only when you click Connect Discord, and it expires after 10 minutes.

We measure traffic with Vercel Web Analytics, which works without cookies: it counts visits and page views in aggregate, stores no identifier on your device, and cannot follow you across other websites.

Some steps happen on other companies' sites, which set their own cookies under their own policies: Steam (steamcommunity.com) when you sign in, Stripe (stripe.com) when you pay or manage billing, and Discord (discord.com) when you authorize the Discord connection.

We do not control those cookies. See each company's cookie or privacy policy.

You can delete or block cookies in your browser settings at any time. Deleting rot_session signs you out. The site browses fine without cookies; you only need them to sign in and manage a subscription.

If we add a cookie, we will list it here first and, where the law requires it, ask for your consent before setting it.

Questions: richard@rustontop.com or anton@rustontop.com.