Controller and contact
Catherine Welsby trading as Exiled / PlayExiled is the data controller for the processing described here. Write to Exiled / PlayExiled, The Management Suite, Parrs Wood Entertainment Centre, Wilmslow Road, East Didsbury, Manchester, M20 5PG, or contact exiled.rce@gmail.com for privacy questions or to exercise your rights.
This notice covers the PlayExiled website, Discord-connected account features, Exiled Rust Console servers and VIP fulfilment. Proposed physical-product features are a private non-transactional preview and are not described as a live service.
Information we use and why
Account and fulfilment information includes Discord ID, username, display name, avatar, guild membership, relevant roles, KAOS link status, linked in-game identity, selected server and entitlement status. We use it to sign you in, check eligibility, deliver VIP and provide support. The lawful bases are performance of a contract where you buy VIP and our legitimate interests in operating secure community services.
Purchase information includes order, payment and subscription references, amount, currency, status, paid-through date, cancellation, refund, dispute, gift-credit and delivery records. We use it to perform the contract, meet accounting and legal duties, prevent duplicate billing, resolve faults and establish or defend legal claims. Stripe and Tip4Serv handle their respective payment entry; PlayExiled does not receive or store your full card number or security code.
Community and security information may include server events, public leaderboard names and statistics, moderation records, support messages, IP address, browser/device details, requested URLs, times and errors. We use this to operate, secure and support the community under legitimate interests, balanced against your rights, and where necessary to meet legal obligations.
Discord community and message processing
DEX (application 1262363239304396821) provides Exiled community commands, authorised staff moderation, welcomes and approved baseline roles. We use current Discord membership, screening and configured staff roles for access checks. Staff website access also requires the existing linked account and individual workspace password. Native Discord Onboarding, Server Guide and AutoMod retain their assigned functions.
The primary bot uses approved Message Content access for configured community safeguards and ticket support. Community safeguards check configured public chats for disallowed attachment metadata, attachment or emoji spam and known phishing domains, with private reports for authorised staff. These checks do not download attachment bytes, visit submitted links or send messages to an external scanning service. Checks are deterministic and processed in memory.
The prepared edit/delete logger has at most 2,000 recent snapshots with a one-hour usable lookback, cleared on stop/restart. Expired snapshots are pruned on the next event; there is no strict idle-time purge timer. It may send relevant excerpts to a restricted Discord staff log. Unseen, expired or restart-lost content is reported as unavailable. It does not reconstruct old chat history.
Restricted KAOS acknowledgement processing is separate and correlates a provider response with a pending member, server and action in its configured parser channel. An unrelated response must not complete another request. Existing service integrations remain operational during the progressive DEX handover.
Submitted warnings, moderation reasons, appeals and support cases use the protected platform database. DEX provides private ticket support, subject to current staff-role checks and the retention arrangements described here.
For eligible support tickets, we may use OpenAI to help DEX understand a player's question and prepare a response. We send the current question, up to four preceding player-visible messages from the same ticket, relevant public support knowledge and the relevant server context. Staff can intervene and correct DEX. Where enabled, a player-visible staff correction and the related question and answer may also be sent to propose a knowledge improvement, which requires staff review before it becomes authoritative. We do not intentionally send attachments, internal staff notes, payment records, Discord identity records or unrelated conversations. Please do not put passwords, payment card details or other sensitive information in ticket messages. Automated screening cannot identify every personal detail. The OpenAI request is configured with store disabled; this is not a promise of zero provider retention.
There is no per-user exemption switch from community message safeguards. Contact exiled.rce@gmail.com for privacy questions or access, correction, deletion, restriction or objections. We do not use Discord-derived information for advertising, relationship/activity profiling or AI-model training. DEX does not track individual Discord online status, activities or client-platform presence.
Arcane remains the progression provider. We are not reconstructing historical chat or XP from Discord roles. Existing native bans, member roles, permanent entitlements, KAOS records and live ticket access are preserved. External providers retain their own service responsibilities until a verified handover.
Discord retention and deletion
Deletion is managed by the Exiled operator after an account/record-specific review. There is no universal 30-day automatic purge or implemented general Production erasure scheduler. Requests go to exiled.rce@gmail.com under the rights process below. The operator checks active enforcement, unresolved appeals, necessary evidence, legal duties and narrowly recorded holds before deletion or irreversible de-identification.
For new DEX moderation, warning, appeal-decision and accountability records, retain the minimum necessary while enforcement or an appeal remains active. Necessary inactive decision/audit context is retained for up to 12 months after the later final event, unless a documented necessary hold applies. Review unnecessary narrative, evidence references and staff notes for removal 90 days after the later final appeal decision or inactive action. This does not automatically clear an active warning or alter punishment thresholds.
Prospective DEX private message-log diagnostic excerpts are retained for 30 days, then operator-managed deletion, unless particular evidence is necessary for an active case or recorded hold. The in-memory logger limitations are described above. Ordinary structured support cases retain the existing 90-day-after-meaningful-closure policy, with active/reopened and narrowly held-case safeguards. Current destructive support tooling remains synthetic Preview-gated; Production deletion remains operator-managed.
An active native Discord ban or restriction is not removed simply because a privacy request is made or a support case closes. Review the continuing necessity and accuracy of active enforcement at least annually. Holds identify their purpose, scope, responsible operator and review date, normally within 90 days. Necessary financial/accounting retention remains separate.
Eligible erasure covers linked DEX records and files or log messages we control, not just a player-facing view. We cannot promise immediate recall of Discord CDN caches, other users’ copies or records controlled by other providers. When restoring a backup, relevant recorded deletion/hold decisions must be reapplied before restored data returns to ordinary staff access. Provider backup retention follows the actual service configuration.
Reward Reel, when available
The optional Reward Reel uses your signed-in Discord ID, current Exiled guild and KAOS-linked status, rules confirmation, country inferred from the request where geographic eligibility is configured, chosen server, daily claim time, spin and prize history, delivery status and support reference. We use these records to operate a free promotion, prevent repeated or fraudulent claims, select prizes fairly and deliver or review rewards. A purchase, TikTok follow or YouTube subscription is not required or verified for entry.
The selection record includes the eligible prize pool, weights, random draw and result. Only authorised Exiled staff can inspect individual reward and delivery records. Public recent rewards omit player names and Discord IDs. We retain promotion and prize records while needed to administer the campaign, resolve delivery or abuse disputes and meet legal obligations, then delete or anonymise them in line with our retention policy. Contact us to ask about your records or rights.
Sources and recipients
We receive information from you and from Discord, KAOS/game-server systems, Stripe, Tip4Serv and the hosting systems used to operate the service. Authorised Exiled staff can access what they need for support, moderation, delivery and financial administration.
Relevant information may be processed by Discord, Stripe, Tip4Serv, KAOS/game-server services, OpenAI, Vercel hosting and Neon database services. These providers may act as processors or independent controllers depending on their role. We may disclose proportionate records to advisers, payment providers or authorities where required by law or necessary for legal claims.
Some providers may process information outside the UK. We rely on the provider's applicable UK adequacy arrangements or recognised transfer safeguards and will provide further information on request.
Retention and security
Account and entitlement records are kept while the account or paid service is active and afterwards only as needed for support, fraud prevention and legal claims. Transaction and accounting records are generally retained for six years after the relevant financial year. Short-lived OAuth security values expire after 10 minutes; the signed account session lasts up to 30 days.
Discord-specific retention and operator-managed deletion are described above. Other delivery and support information is retained only as needed for operations, disputes, safety or legal duties, then deleted or anonymised. Necessary holds are scoped and reviewed. Verified safeguards include TLS database connections, Neon database encryption at rest, managed hosting secrets encrypted at rest, signed sessions, individual staff-password hashes and current-role access checks. Identified DEX worker credentials, recovery copies, retained API records and persistent journals on our VPS now use guest-managed encryption, with the private recovery key kept off that VPS. An independent encrypted recovery archive has passed authenticated recovery checks. Earlier provider restore points require verified replacement or expiry; we do not claim to have retrospectively encrypted them. This is protection of the identified Discord-data boundary, not a claim that the entire operating-system disk or every historical export is encrypted. No service can promise absolute security.
Cookies and browser storage
The public site currently uses no advertising or optional analytics cookies. Vercel Analytics has been removed. We therefore do not show a consent banner that would have no optional choice to manage.
Essential first-party storage is used only when you request the related feature: exiled_session keeps a Discord account signed in for up to 30 days; exiled_oauth_state and exiled_oauth_return protect sign-in and expire after 10 minutes; exiled_collectables_preview remembers authorised private-preview access for seven days; and exiled-collectables-preview-basket local storage remembers items placed in that private test basket until you clear them. Clearing site data signs you out or empties the preview basket.
The public Tip4Serv store loads Tip4Serv's checkout script only when products are available. Opening its checkout can allow Tip4Serv to use its own necessary payment and security technologies under its notice. PlayExiled will review this inventory again before changing providers or adding optional measurement tools.
Your rights
Depending on the circumstances, you can ask exiled.rce@gmail.com for access, correction, erasure, restriction or portability, or object to processing based on legitimate interests. The right to object to direct marketing is absolute. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Some rights have legal exceptions.
We may request proportionate information to verify identity and normally respond within one month. You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. You do not need to accept our decision before contacting the ICO.
Automated systems check account linking and payment status and queue fulfilment. PlayExiled does not make solely automated decisions with legal or similarly significant effects. Fraud restrictions, disputes and contested moderation actions require human review.
Children and changes
The connected game and platforms have their own age requirements. PlayExiled does not knowingly use children's information for targeted advertising or profiling. A parent or guardian can contact us about a young person's information.
We will update this notice when the service or providers change and will explain material changes where appropriate. A new notice will not be used to justify an incompatible earlier use of information.