Save this page

Press Ctrl+D (Cmd+D on a Mac) to bookmark this page. Open your browser's menu (⋮, or Share on an iPhone) and choose Add bookmark or Add to Home Screen to keep this page.

Privacy

RustPotato processes minimal visitor data, uses no advertising trackers, and stores your tool settings and skin portfolio locally inside your own browser.

Short version: RustPotato has no account, no newsletter and no cookie, and sends nothing to an analytics company. Visits are counted on our own server, and the counter never stores your IP address. The sections that follow detail every data category, retention period, and GDPR right.

What the site puts in your browser

A few things, all of them yours, all of them staying on your device. None is a cookie, so none travels with a request and none can follow you to another site.

Day or night. If you use the theme switch, that choice is kept in your browser so the next page opens the way you left it.
The 18+ answer. If an advert asks you to confirm your age and you do, the answer is kept until you close the tab, so the same box does not ask again on every page. It is a yes and nothing else.
Your skin portfolio. If you use the portfolio page, the skins you add, how many of each, and the purchase dates and prices you type are kept in your browser; the page can download that list as a file for you, and nothing about it is ever sent to us or to anyone.
The columns you hide on the skin lists, so they stay hidden on your next visit.
The genetics calculator keeps your clones, your containers and the steps you ticked, so the plan is still there when you come back.
The Skin Lab keeps the outfits and sets you save.
The drops page keeps the drops you ticked, the streamers you asked to be alerted about, and whether you stopped the crate animations. Those alerts are shown by your own browser while a page of the site is open; nothing about them is sent to us or to anyone.
The videos page keeps the videos you marked as watched, the language you picked and the layout you chose.
The live streams page keeps the language you picked.
The Server Finder keeps the servers you starred, and the Wipe Calendar the alerts you set.
The CCTV codes page keeps your choice when you hide all the camera views.
Your conveyor filter lists. If you keep lists of your own on the conveyor filter page, they and the categories you sort them into are stored in your browser; the page can download them as a file for you, and they are not sent to us.
Your open core plan. The Open Core Manager keeps the name you gave the plan, the boxes you counted, their names, what you chose to sort and the stage you marked as pasted in game, all in your browser. When you press Send to My lists, it adds the filters of the plan to your conveyor filter lists, in the same browser; nothing is sent to us.
The stack you type on the wheel calculator and on the blackjack page. Each keeps that one number, so it is still there on your next visit.

Clearing your browser data removes all of it. Everything still works without them: the site forgets your theme and your ticks, asks about age once more, and your portfolio and saved outfits are gone unless you downloaded the portfolio from its page.

The genetics calculator can also read your game screen. When you press its scan button, your browser asks which screen or window to share; the frames are read inside the page to find your clones and never leave your device, and stopping the share stops it.

Video thumbnails and stream previews

The videos page and the trending videos on the home page show each YouTube video’s thumbnail straight from YouTube’s image server (i.ytimg.com). Opening either page sends your IP address and browser details to Google, as any picture from another site would. The videos page also lists videos from Bilibili: their thumbnails come from Bilibili’s image server (i0.hdslb.com), only while one of them is on your screen, and without the address of the page you are reading. No video player is loaded there: each video opens on its own platform.

The live streams page works the same way: each stream’s preview picture comes straight from the platform it is on. That is Twitch (static-cdn.jtvnw.net), Kick (images.kick.com), YouTube (i.ytimg.com), VK Video Live (images.live.vkvideo.ru), CHZZK (livecloud-thumb.akamaized.net), SOOP (liveimg.sooplive.com), Huya (msstatic.com), Bilibili (i0.hdslb.com) or TwitCasting (apiv2.twitcasting.tv). Opening that page sends your IP address and browser details to the platforms whose streams are on your screen, and to no other; the address of the page you are reading is not sent along. No player and no chat is loaded there: each stream opens on its own platform.

The videos and live streams pages use YouTube API Services. By using them you agree to be bound by the YouTube Terms of Service, and Google handles what it receives as set out in the Google Privacy Policy.

Counting visits

The counter runs on the site’s own server, from this domain, using open source software. Nothing about your visit is sent to Google Analytics or to any other company, and there is no consent banner because there is nothing to consent to.

For each page view it records:

the page you opened
the site you came from, if you followed a link
your browser and your operating system
your device type and your screen size
your language
an approximate location, worked out from your IP address and never more precise than a region
a session identifier worked out from a hash of your IP address and browser, which groups the pages one browser opens on this site; it is never linked to a name or an account

What it never records:

your IP address itself, which no column in the database stores
your full browser identification string

It also records where a page was clicked and how far down it was scrolled. Those positions are added together across every reader into a heat map, so we can see which parts of a page people actually read. Your screen is never recorded, and session replay is switched off on our server: nothing of the kind is stored anywhere.

If your browser sends a Do Not Track signal, the counter does not count you and the heat map never starts. Any tracker blocking extension stops both as well, and nothing on the site breaks when it does.

The adverts

The site carries a small number of adverts, served by our own server rather than by an ad network. No network means no auction, no bidder, and nobody buying a profile of you.

No lasting identifier is set. Each page view gets a random token that lives in memory and dies with the page: it stitches together the three events of one advert and is never reused. There is no cookie and no fingerprint.

Three things are counted for each advert: that it was placed, that it was on screen long enough to have been seen, and that it was clicked.

An advert link points at this site, not at the advertiser, and our server forwards you. That is what lets a click be counted without a tracking script, and it means the address in your status bar is ours.

Affiliate links

Some adverts are affiliate links: if you sign up after following one, the company pays us a commission at no cost to you. Once you leave, their privacy policy applies and not this one. These partners usually set their own cookie to credit the visit to us. They report earnings to us in aggregate, they never tell us who you are, and we cannot see who bought what.

Server logs

The server keeps standard access logs: the address that made the request, the page, the browser identification string and the time. They exist to keep the site up and to spot abuse, and they are never shared.

Your rights

If you are in the EU, the UK, or anywhere else with data protection rights, you can ask what is held about you, ask for it to be corrected or deleted, and object to it being processed. Given how little is held, which is server logs, the visit counter’s records under the GDPR and whatever you chose to write to us, asking is enough. Write to the address below and you will get an answer within thirty days. You can also complain to your national data protection authority.

Getting in touch

One address, read by the person who runs the site:

contact@rustpotato.com

Changes

If something is added that touches personal data, this page changes before the feature ships, not after.

Frequently asked questions about privacy on RustPotato

What personal data does RustPotato collect from visitors?

RustPotato collects no account registrations, email addresses, payment details, or persistent advertising identifiers from visitors. It records only aggregate first-party visit metrics such as the requested page path, browser family, device category, language, and country while discarding raw IP addresses immediately.

Where does RustPotato store my calculator settings and skin portfolio?

RustPotato stores calculator presets, genetics plans, conveyor filter lists, skin loadouts, and Steam portfolio entries directly in local browser storage on your device. They never leave your computer or phone, and clearing site data in your browser removes every saved setting immediately.

Does RustPotato use third-party advertising cookies or cross-site tracking?

RustPotato serves house banners from its own domain without loading third-party ad networks, behavioral tracking pixels, or cross-site profiling cookies. It logs only an anonymous server-side counter when a reader clicks an outbound partner link, without attaching any personal identifier or browser fingerprint.

How can I opt out of visit counting on RustPotato?

Visitors can disable first-party visit counting and interaction heatmaps on RustPotato by enabling the standard Do Not Track setting in their web browser preferences. When a browser sends that signal, the measurement script stops executing and transmits zero pageview or click events.

When does my browser connect to external services on RustPotato?

External connections on RustPotato happen only on pages that display live Twitch, Kick, or YouTube media thumbnails, or when you open an external link. Playing a stream preview or visiting Steam, Ko-fi, or Discord connects your browser directly to that platform under its own privacy policy.

How do I exercise my GDPR privacy rights with RustPotato?

European Union visitors and all other readers can exercise their GDPR access, rectification, erasure, or objection rights by emailing the RustPotato contact address or writing to Egerie SAS in Balma. Because the site stores no personal profiles, most data lives solely inside your own browser.