Privacy Policy
Last updated: October 5, 2026
We care about your privacy. This Privacy Policy explains how Team Broadcast Station (the "Service"), operated by ZI AN WU, a sole proprietor, collects, processes, and uses your personal data in accordance with the Personal Data Protection Act of the Republic of China (Taiwan). By using the Service, you agree to the practices described in this policy.
1. Data we process
- Account data (stored on our servers): your username or email address (depending on how you sign up) and your password (stored only as an irreversible hash, so we cannot recover your original password). If you sign in with Google or Steam, we also store the associated account ID and display name.
- SteamID64 (stored on our servers): used to link your account to Steam.
- Rust+ and Rustoria credentials (stored only on your computer): the authorization tokens and push credentials obtained when you sign in to Rust+, and the token obtained if you sign in to Rustoria in the app, are stored only on your own computer and are never uploaded to our servers.
- Other players' public Steam data: when you use roster or stats commands, the app sends the relevant players' SteamID64s to our server, which looks up their public display names and public game statistics through the Steam Web API. Results are kept in server memory for up to 30 minutes and are not written to our database.
- Players you track (optional): the Steam profile links and notes you add in the player tracker (追蹤查詢) are stored only on your computer. Every minute, the app sends those players' SteamID64s to our server, which looks up their public online status, the game they are playing, and the game server they are on through the Steam Web API (we cannot see anything they have set to private on Steam). Results are kept in server memory only briefly and are not written to our database.
- Subscription and payment status (stored on our servers): your plan, subscription status, and next billing date. Full payment details, such as your card number, are handled directly by Paddle.com. We never see or store them.
- Server pairing, gene breeding, livestock, and wipe recap data (stored only on your computer): the IP address, port, name, and other settings of the Rust servers you pair with; your gene breeding records; your livestock roster (genes, sex, pens, and notes for each cow); and wipe recap statistics (such as teammates' online hours and death counts).
- Screen scanning (optional, processed only on your computer): when you turn on scanning (掃描) in the gene breeding planner or the livestock page, the app reads your screen to recognize crop genes or a cow's info panel. Screen images are processed in real time on your computer only. They are never uploaded or saved, and scanning stops when you turn it off or leave that page. The livestock page keeps only a small cut-out image of each cow's name, stored on your computer, so you can tell your cows apart.
- Technical data: IP address, sign-in times, computer name (shown in your list of signed-in devices), and error logs, used for operations, troubleshooting, and abuse prevention.
2. How we use your data
- To provide and maintain the Service and to verify your access to it
- To let the desktop app connect to the Rust+ Companion service on your behalf and receive in-game event notifications
- To handle subscriptions, renewals, cancellations, and support requests
- To detect and prevent abuse, fraud, and violations of our Terms of Service
- To cooperate with authorities when required by law or to protect our legal rights
3. How we share your data
We do not sell your personal data. We share data only as needed to provide the Service, with:
- Paddle.com: to process subscription payments, receipts, and refunds (Paddle receives the email address you enter at checkout and your subscription status).
- Facepunch Studios: when you sign in to Rust+ and register for game event notifications, the Rust+ Companion service processes your Steam sign-in and notification registration data.
- Expo push service and Google Firebase Cloud Messaging: to receive Rust+ game event notifications. Only the necessary device push tokens are transmitted.
- Valve (Steam): your sign-in information when you sign in with Steam, and our public player data lookups through the Steam Web API.
- Google: your sign-in information if you choose to sign in with Google.
- Rustoria (a third-party Rust server network): if you sign in to Rustoria in the app and use stats commands, the app sends your Rustoria token to Rustoria to request leaderboard data.
- Google (Gmail) and Resend: to send account emails (such as password reset emails and email verification codes).
- Zeabur: to host our website and database.
- Cloudflare (R2): to store our daily database backups (encrypted before upload, excluding sign-in sessions, accessible only to us, and automatically deleted after 30 days), and to serve app installer and update downloads.
- Sentry: for error reporting (when enabled).
- When disclosure is required by law, or is necessary to protect our rights and safety, or those of our users or the public.
Valve, Google, Facepunch, and these other providers process data under their own privacy policies, which are outside our control. These providers may be located outside Taiwan, so your data may be transferred to and processed in other countries. We share only the data they need to provide their service.
4. Data retention
We keep the data above for as long as your account exists. You can ask us to delete your account at any time, and we will delete your personal data within a reasonable time, except for records we are required by law to keep (such as transaction records) and, for accounts suspended for violating our Terms of Service, the data and records we need to keep as evidence. After deletion, your data may remain in earlier database backups. All database backups are encrypted and kept for no more than 30 days, after which they are deleted. Data stored only on your computer is removed when you uninstall the app.
5. Your rights
Under Article 3 of the Personal Data Protection Act, you have the right to inquire about and review the personal data we hold about you, to request a copy of it, to request that it be supplemented or corrected, to request that we stop collecting, processing, or using it, and to request that it be deleted. To exercise any of these rights, please contact us using the details below, and we will respond within a reasonable time.
6. Data security
We use reasonable technical and organizational measures to protect your personal data, including password hashing, encryption in transit, and access controls. No system is completely secure, but we regularly review and improve our security measures.
7. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them.
8. Users in the European Economic Area and the United Kingdom
We process your data on these legal bases: performance of a contract (providing your account and subscription), legitimate interests (abuse prevention, operations, and troubleshooting), and your consent (optional features such as screen scanning and Rustoria). You also have the right to data portability, to restrict processing, and to withdraw consent, and you may lodge a complaint with your local data protection authority (for UK users, UK data protection law applies). Your data may be transferred to and processed in Taiwan and in the countries where our providers operate.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date.
10. Language versions
This document is available in Chinese and English, and both versions have equal effect. If there is any inconsistency between them, the interpretation more favorable to the customer applies.
11. Contact us
If you have any questions about this Privacy Policy or your personal data, please email us at teambroadcast.support@gmail.com.