Privacy Policy
> last updated 2026-09-23 · operator: TRAFFIXORA OÜ
data controller
TRAFFIXORA OÜ, registry code 17543319, Maakri tn 19/1, 10145 Tallinn, Harju maakond, Estonia ("RIVEN"), is the data controller. Contact: privacy@riven.army.
what we collect
| data | source | purpose |
|---|---|---|
| Steam ID, display name | Steam OpenID | Account creation & auth |
| Email address | Onboarding form | Receipts, alerts, support |
| Trade URL | Onboarding form | Skin delivery via Steam |
| Discord handle | Optional input | Support escalation |
| IP address, user agent | Automatic | Security & fraud prevention |
| Order history | Platform activity | Service delivery & disputes |
| Billing address (name, street, city, postcode, country) | Wallet top-up form | Card payment and fraud checks |
| Seller identity check: full legal name, an image of a government ID document, residential address | Seller verification form, only if you sell or withdraw | Identity verification before a payout is released |
| Seller payout details (IBAN of an account in your name) | Seller verification form, only if you sell or withdraw | Paying out your seller earnings by bank transfer |
| Coach application: display name, legal name, date of birth, country, languages, Rust experience (hours, years, servers, achievements), portfolio links (Steam, YouTube, Twitch), coaching formats, how much coaching you have done and where, availability and timezone | Coach application, only if you apply to coach | Vetting coaches and showing their profile to players |
| Coach bank details: account holder, IBAN, BIC, bank country | Coach application, only if you apply to coach | Paying coaching earnings by bank transfer |
| Coach identity document: an image of a government ID, held in a private store readable only by RIVEN staff | Coach application, only if you apply to coach | Identity verification before approval and before the first payout |
| Coach CV (optional): a PDF or Word document you choose to attach, held in a private store and seen only by the RIVEN staff who review coach applications | Coach application, only if you apply to coach and choose to attach one | Assessing your coach application — it is used for nothing else and never shown to players |
| Contact form submission (name, email, message) | Contact form | Answering your enquiry |
how we use your data
- ▸Process purchases and deliver items
- ▸Send transactional emails (receipts, trade updates)
- ▸Prevent fraud and meet legal record-keeping obligations
- ▸Verify a seller’s identity before releasing a payout
data sharing
- ▸Skin supply partner — to execute trades (Steam ID + trade URL)
- ▸Cloud file storage — the identity document image and any CV you upload are held by our hosting provider’s file store, not on this page
- ▸Our own operations channel — purchases, contact-form messages, signups and account deletions are relayed to a private staff messaging channel so a person sees them; this includes your email address, the items and the totals
- ▸Your coach — if you book an Academy session or order a review, guide or course, the coach you bought from is shown your display name, email address, Discord handle and Steam ID on their own console, because they deliver it to you directly and RIVEN does not host the session itself
- ▸Law enforcement — when required by law
We never sell, rent, or share your data for advertising purposes. We do not run any analytics or advertising trackers — there are none in this site’s code.
data retention
Account data is retained while your account is active. You can delete your account at any time from Account settings, or ask us to. Deleting your account removes your profile, wallet, saved items, orders, seller listings, identity-check record and the uploaded identity document immediately — we do not keep a copy of your order history after you delete the account.
A CV attached to a coach application is kept, with the rest of the application, for as long as your account exists — whether the application is approved or not — and is deleted together with your coach identity document when you delete your account.
your rights
Under the EU General Data Protection Regulation and the UK Data Protection Act 2018 you have the following rights. Two of them need no request at all.
- ▸Access (Art. 15) — a copy of the personal data we hold about you
- ▸Rectification (Art. 16) — correct anything inaccurate or incomplete
- ▸Erasure (Art. 17) — delete your account and its data, yourself, from “Delete account” on your Account page
- ▸Portability (Art. 20) — export your profile, orders and saved items as JSON, yourself, from “Download my data” on your Account page; the file is generated on the spot
- ▸Restriction (Art. 18) — ask us to stop processing while we check an objection or a correction
- ▸Objection (Art. 21) — object to processing we do on legitimate-interest grounds
For the rights that are not self-serve, email privacy@riven.army. We respond within 30 days.
legal basis for processing
- ▸Contract — processing necessary to deliver the items and services you buy
- ▸Consent — the one optional preference offered in the cookie banner (remembering your billing address in your own browser), which you can change or withdraw at any time via “Manage cookies” in the footer. RIVEN sets no advertising or tracking cookie, operates no marketing mailing list and sends no marketing email.
- ▸Legal obligation — record-keeping we are required to do
- ▸Legitimate interest — fraud prevention and platform security
where your data is held
Your account data is stored in the European Union: our database runs in the Frankfurt region (eu-central-1). The application servers that read it run in our hosting provider’s United States region, so your data is processed outside the EEA in the course of serving these pages. Identity documents uploaded for seller verification or with a coach application, and any CV attached to a coach application, are held in our hosting provider’s private file store, reachable only through an authenticated route on this site.
We share data only with the providers named in section 4. We do not sell it, and we do not transfer it to any other recipient without a legal obligation to do so.
complaints
If you think we have handled your data wrongly, tell us first at privacy@riven.army. You also have the right to lodge a complaint with the data protection supervisory authority in your own country.
cookies
See our Cookie Policy for details on what cookies we use and how to manage them.
changes
A material change to this policy is published here with a new “last updated” date at least 14 days before it takes effect. We do not send a change notice by email — RIVEN operates no mailing list — so this page is the record to check.