Privacy

Your data stays with us

What we collect, why we need it, who sees it and how long it's kept. Last updated 1 October 2026.

The short version

Only what's needed, only used by us

  • We only collect what we need to vet people and run the clan
  • It's only used inside CTFO's own systems, nowhere else
  • It's never sold, never shared for advertising and never used for marketing
  • We never see your Steam or Discord password
  • This site has no ads, no analytics and no tracking cookies
  • You can ask to see your data or have it deleted at any time
Who we are

Who's responsible for your data

CTFO is run by Natchland Studios, which is responsible for the data described here. A way to contact us about your data goes up here before applications open. Until then we don't hold anything on anyone beyond the short server logs below.

Visiting the site

Just reading? We keep next to nothing

This site doesn't use cookies, analytics or trackers. It doesn't load anything from other companies either. Fonts and everything else are served from our own server.

Like any web server, ours keeps a basic log of requests (your IP address, the page asked for and when) so we can spot attacks and fix problems. Those logs are deleted after 14 days.

Applying and being a member

What we collect

From Discord, when you sign in with it: your Discord ID, your username and the Steam account you've linked to your Discord profile, if you have one.

From Steam, if you sign in with Steam instead: your Steam ID only. The sign-in happens on Steam's own page, so we never see your password.

Public Steam data for that Steam ID: whether your profile is public, when the account was made, any bans on it, the games on it with their hours and your Rust stats.

What you tell us, like your answers when you apply.

Clan records once you're in: your group, your role and access level, wipes played, reports and notes made by admins.

On our community server, once it's running: connections, chat and reports, the same as most game servers keep. This applies to everyone who plays there, not just members.

We don't collect your real name, address, date of birth or any payment details.

How it's used

Running the clan, nothing else

We use your data to check applications, keep cheaters and throwaway accounts out, re-check members so we notice a new ban or a profile going private, put people into groups, decide who gets access to what in game, enforce the rules and run the community server.

That's the full list. It isn't used for anything else.

Under UK data protection law, we rely on our legitimate interest in keeping cheaters out and running the clan safely. Where we ask for your agreement to something specific, we rely on that instead. You can change your mind at any time.

Who sees it

Us and only us

Your data is only seen by Natchland and the clan admins they appoint. Group leads see what they need to run their group, like your group and role, not your vetting results or admin notes.

We don't sell it, rent it, trade it or hand it to anyone for advertising. The only time we'd ever share it is if the law requires us to.

Discord and Steam are separate companies with their own privacy policies. We read from them, we don't send your data back to them.

Keeping it safe

On our own server, locked down

Everything is stored on our own server in Germany, inside the EU. It isn't kept with outside storage, analytics or marketing companies.

Everything between you and us goes over an encrypted connection. Only admins can get to the data, through accounts we control.

No system can promise it'll never be breached. If one ever happened that put your data at risk, we'd tell you and report it to the Information Commissioner's Office as the law requires.

How long we keep it

No longer than we need

Applications that don't go through are deleted 90 days after the decision.

Members' data is kept while you're in the clan and deleted 90 days after you leave.

Removals and bans. If you're removed for breaking the rules, we keep your Discord ID, Steam ID and the reason for as long as the ban stands, so the same accounts can't apply again. Nothing else is kept.

Server logs from this site are deleted after 14 days.

Your rights

It's your data

You can ask us for a copy of everything we hold about you, ask us to correct it, ask us to delete it or object to how we use it. Contact us the way shown above and we'll reply within a month.

Deleting your data means leaving the clan, as we can't vet or run a member we hold nothing on. A ban record is the one thing we keep, for the reason above.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office.

Changes

If this changes

The date at the top shows when this was last changed. Anything that changes how your data is used gets announced in the Discord before it happens.