Your data
Privacy Policy
pending-final-review operates the RushXI early-access website. Contact with privacy questions or rights requests.
Effective 15 September 2026Information we collect
We collect your email address, password hash, Discord account links and consent records, account security events, and limited anti-abuse data such as IP-derived rate-limit records. We do not ask for or store EA passwords, EA session cookies, two-factor codes, or recovery data.
Website traffic analytics
We measure visits to public website pages using first-party, cookie-free analytics. We retain page paths, timestamps, referring website hostnames, broad device categories and a daily rotating keyed hash derived from the request IP address and browser type for up to 90 days. Raw IP addresses and full referrer URLs are not retained in analytics records, and views are not linked to customer accounts. Admin and customer pages are excluded. Collection respects Do Not Track and Global Privacy Control browser settings.
How we use it
We use registration data to verify interest, secure the service, communicate about access, prevent abuse, and meet legal obligations. We do not sell personal information.
Retention and security
Single-use verification records expire, operational records are retained only as needed for security and legal purposes, and access is restricted. No internet service can promise absolute security.
Service providers
Infrastructure, email delivery, CAPTCHA, monitoring, and future payment providers process only the information needed to provide their service. The current launch uses DigitalOcean, Resend, and Cloudflare Turnstile-compatible services.
Your rights
Depending on where you live, you may ask to access, correct, delete, restrict, or export your data, or object to processing. Contact . We may need to verify your identity first.