Controller and contact
Catherine Welsby trading as Exiled / PlayExiled is the data controller for the processing described here. Write to Exiled / PlayExiled, The Management Suite, Parrs Wood Entertainment Centre, Wilmslow Road, East Didsbury, Manchester, M20 5PG, or contact exiled.rce@gmail.com for privacy questions or to exercise your rights.
This notice covers the PlayExiled website, Discord-connected account features, Exiled Rust Console servers and VIP fulfilment. Proposed physical-product features are a private non-transactional preview and are not described as a live service.
Information we use and why
Account and fulfilment information includes Discord ID, username, display name, avatar, guild membership, relevant roles, KAOS link status, linked in-game identity, selected server and entitlement status. We use it to sign you in, check eligibility, deliver VIP and provide support. The lawful bases are performance of a contract where you buy VIP and our legitimate interests in operating secure community services.
Purchase information includes order, payment and subscription references, amount, currency, status, paid-through date, cancellation, refund, dispute, gift-credit and delivery records. We use it to perform the contract, meet accounting and legal duties, prevent duplicate billing, resolve faults and establish or defend legal claims. Stripe and Tip4Serv handle their respective payment entry; PlayExiled does not receive or store your full card number or security code.
Community and security information may include server events, public leaderboard names and statistics, moderation records, support messages, IP address, browser/device details, requested URLs, times and errors. We use this to operate, secure and support the community under legitimate interests, balanced against your rights, and where necessary to meet legal obligations.
Limited Discord message content
The Exiled Discord bot requests Discord Message Content access only for the KAOS parser acknowledgement workflow and other explicitly required Exiled bot functions. It reads messages in the configured restricted parser channel so it can match a KAOS response to a pending Discord ID, server and requested action. An unrelated success message cannot complete another request.
PlayExiled does not use Discord message content for advertising, profiling or AI-model training. Access is restricted to the bot functions and authorised staff needed to operate and troubleshoot delivery. Message content is not collected from unrelated channels for this purpose.
Sources and recipients
We receive information from you and from Discord, KAOS/game-server systems, Stripe, Tip4Serv and the hosting systems used to operate the service. Authorised Exiled staff can access what they need for support, moderation, delivery and financial administration.
Relevant information may be processed by Discord, Stripe, Tip4Serv, KAOS/game-server services, Vercel hosting and Neon database services. These providers may act as processors or independent controllers depending on their role. We may disclose proportionate records to advisers, payment providers or authorities where required by law or necessary for legal claims.
Some providers may process information outside the UK. We rely on the provider's applicable UK adequacy arrangements or recognised transfer safeguards and will provide further information on request.
Retention and security
Account and entitlement records are kept while the account or paid service is active and afterwards only as needed for support, fraud prevention and legal claims. Transaction and accounting records are generally retained for six years after the relevant financial year. Short-lived OAuth security values expire after 10 minutes; the signed account session lasts up to 30 days.
Delivery logs, support records and moderation evidence are kept only while needed for operations, disputes, safety or claims, then deleted or anonymised. A specific legal hold can extend retention for the affected records. Access controls, signed sessions, isolated Preview resources and audit records protect the data, although no service can promise absolute security.
Cookies and browser storage
The public site currently uses no advertising or optional analytics cookies. Vercel Analytics has been removed. We therefore do not show a consent banner that would have no optional choice to manage.
Essential first-party storage is used only when you request the related feature: exiled_session keeps a Discord account signed in for up to 30 days; exiled_oauth_state and exiled_oauth_return protect sign-in and expire after 10 minutes; exiled_collectables_preview remembers authorised private-preview access for seven days; and exiled-collectables-preview-basket local storage remembers items placed in that private test basket until you clear them. Clearing site data signs you out or empties the preview basket.
The public Tip4Serv store loads Tip4Serv's checkout script only when products are available. Opening its checkout can allow Tip4Serv to use its own necessary payment and security technologies under its notice. PlayExiled will review this inventory again before changing providers or adding optional measurement tools.
Your rights
Depending on the circumstances, you can ask exiled.rce@gmail.com for access, correction, erasure, restriction or portability, or object to processing based on legitimate interests. The right to object to direct marketing is absolute. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Some rights have legal exceptions.
We may request proportionate information to verify identity and normally respond within one month. You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. You do not need to accept our decision before contacting the ICO.
Automated systems check account linking and payment status and queue fulfilment. PlayExiled does not make solely automated decisions with legal or similarly significant effects. Fraud restrictions, disputes and contested moderation actions require human review.
Children and changes
The connected game and platforms have their own age requirements. PlayExiled does not knowingly use children's information for targeted advertising or profiling. A parent or guardian can contact us about a young person's information.
We will update this notice when the service or providers change and will explain material changes where appropriate. A new notice will not be used to justify an incompatible earlier use of information.