RushBox · updated October 28, 2026
Your privacy.
RushBox keeps as little about you as it can. There are no ads, no tracking and no analytics.
Who is responsible
- Seller
- RushBox
- Organisation number
- NO 938326398
- Address
- Klyvevegen 7, 3740 Skien, Norway
- mikael@vigevinst.no
What we store, and why
- Your account: username, a one-way hash of your password (never the password itself) and an optional recovery key hash. Needed to run your account.
- Your game: credits, skins, progress, trades, battles, chat messages and feedback you send. This is the game itself.
- Activity log: what each account did in the game, kept for 30 days to find cheating and fix mistakes.
- Security: a session cookie that keeps you signed in, and a keyed hash of your IP address for rate limits. We do not store your IP address itself.
- Purchases: which plan you bought, the amount, the status and the dates, plus the ids Stripe gives the payment, the subscription and you as a customer. Needed to deliver VIP and for bookkeeping.
Payments
Payments are made on Stripe’s page. Stripe receives your card details and email address and processes them under its own privacy policy; RushBox never receives your card number. Stripe tells us only whether a payment went through, and lets us refund or cancel it.
Other services
The site loads its fonts from Google Fonts and skin pictures from Steam’s image servers, so those services see your IP address when they send them. The site runs on a rented server in the EU.
How long
Account and game data are kept until you ask us to delete your account. The activity log is deleted after 30 days. Backups are kept for up to 30 days. Purchase records are kept for five years, as Norwegian bookkeeping law requires.
Your rights
You can ask to see, correct or delete what we have about you, or object to how we use it. Write to mikael@vigevinst.no. If you think we handle your data wrongly, you can complain to Datatilsynet, the Norwegian data protection authority (datatilsynet.no).
Cookies
One cookie, set when you sign in, keeps you signed in. It is needed for the site to work, so there is nothing to consent to. A few settings, such as your chat preferences, are kept in your browser’s local storage.