BLACKWATCH01 /
Who operates Blackwatch
Blackwatch is an independent project produced and operated by RUST. This policy describes the current Blackwatch service and testing community operated by RUST. Other people who independently host or modify the software control their own instance and should provide their own privacy information. Contact RUST through the linked community/support server for questions about the service covered here.
02 /
Information the bot processes
Blackwatch uses Discord user/member IDs, server/channel/role IDs, names and permissions to operate moderation and access controls. It processes message text and mention counts for spam detection, and join events and audit-log events for enabled security features. Short recent-message and burst-detection histories are held in host memory; they are not a general searchable archive of all server messages. Staff-entered reasons, notes or exported reports may contain message excerpts or other content submitted by staff.
03 /
Information that is stored
The host can store incident records (time, severity, type, actor, target and moderation details), case notes and resolution state, trusted-operator and exemption lists, configuration, channel/role permission snapshots, saved lockdown permissions and checklist results in a local SQLite database. Tester forms store your Discord ID, submission time, motivation, availability, experience, application state and review decision. Local command history and exported reports are saved on the relevant host/client devices. Application answers should not include passwords, credentials or sensitive personal information.
04 /
Remote client access and Discord messages
Trusted CMD clients use an owner-issued bearer credential linked to a Discord member ID. The host stores the webhook ID and credential needed to exchange commands and replies through Discord. The client stores its own access file, a pending request receipt and any reports it downloads; the public support invite may also be cached. The host records request message IDs to prevent commands from repeating. Command requests/replies and application review cards are stored in private Discord channels. Server owners, authorized staff, server administrators and anyone with authorized device/file access may be able to see relevant records. A client credential is not a Discord password, but a person holding it can act with the access assigned to it.
05 /
Why the information is used
Information is used to detect configured security events, apply permitted moderation actions, keep incident records, restore channel permissions, review tester applications, check command access, produce requested reports and investigate operational problems. Where applicable law requires a legal basis, security and moderation processing supports legitimate interests in maintaining the community and controlling abuse; voluntary applications are processed to review the access you request. Users may ask about or object to relevant processing as permitted by applicable law.
06 /
Sharing and service providers
RUST does not sell Discord data, supply it to advertising networks, or use message content to train AI models. Relevant records are available to authorized operators and moderators. Discord processes messages, API requests, attachments and other platform data under its own policies. A self-hosting operator controls their hosting/device environment and any backup services they choose. Application status may be sent to you by Discord DM; when DMs are closed, you can use /tester status. Reports can be downloaded by authorized users, so copies may exist outside the host database.
07 /
Retention and deletion
Records should be kept only for as long as needed for their moderation, security, application-review or operational purpose, and to meet applicable legal obligations. The current software does not automatically delete records after a fixed number of days; removal from local databases, history, exports and Discord messages requires operator action. Removing the bot, leaving the server, resolving a case, rejecting an application or revoking a client key does not automatically erase every related record. RUST should review stored information and remove information no longer needed. Independently controlled exports, backups and Discord platform records require separate handling.
08 /
Your requests and choices
Contact RUST in the support community to request access, correction or deletion of information associated with your Discord ID, or to raise a privacy concern. Ask for a private conversation before sending sensitive details. You do not need to provide a password, access token or government ID. The operator may ask you to demonstrate control of the relevant Discord account. Requests are handled subject to applicable law, legitimate security needs and the limits of records controlled by other server operators or Discord. Where applicable, you may have rights to object, restrict processing, receive a portable copy, withdraw consent where consent is used, or complain to the relevant data protection authority. Revoking CMD access blocks future use of that key but is separate from a data-deletion request.
09 /
Website, hosting and external links
This website adds no advertising pixels, visitor accounts, contact forms or custom analytics trackers. Its console preview is illustrative and sends no commands to a server. The hosting provider may process normal connection information, such as IP addresses and request headers, under its own policies. Following the Discord invite takes you to Discord, whose privacy and cookie policies apply there. The website does not publish your tester answers, moderation records or client credentials.
10 /
Security, eligibility and changes
Operators should keep host devices, databases, reports, backups and access files private and restrict staff access. HTTPS is used for Discord transport, but no system can guarantee complete security. Blackwatch is intended only for people who meet Discord’s minimum age and local eligibility requirements; do not send sensitive personal information in testing forms. This policy will be updated when the service or its data practices change. The date above identifies this version.
Need help?
Join the Blackwatch support community and ask to contact RUST privately.
https://discord.gg/jYRq3d5xQQPlatform references: Discord Privacy Policy · Discord Terms