At RustFS ("we," "our," or "us"), we are committed to respecting your privacy and protecting the data of our users and enterprise customers. RustFS is an open-source, high-performance distributed object storage platform designed from the ground up for self-hosted, on-premises, and cloud-native deployments.
This Privacy Policy describes how information is handled in connection with:
- The RustFS Software (your deployed storage cluster or instances).
- The RustFS Official Website (rustfs.com and its subdomains).
1. RustFS Software Privacy Architecture (Self-Hosted Deployments)
Our privacy philosophy for the RustFS software is simple: Your data belongs exclusively to you.
A. Zero Telemetry & Zero Business Data Collection
The RustFS software operates entirely within your private infrastructure.
- No Content or Metadata Access: RustFS does not, under any circumstances, collect, transmit, inspect, or store your application data, S3 object content, bucket metadata, user credentials, access keys, or network logs on external servers.
- No Behavioral Tracking: The software contains no hidden telemetry, analytics scripts, or background tracking mechanisms designed to monitor usage behavior, access patterns, or system configurations.
B. Minimal Version Check for Telemetry & Statistics
To help us understand active platform adoption and guide future release engineering, the RustFS software includes a minimal, automated version checking mechanism.
- What We Collect: The software periodically sends an automated ping containing only the software version string (for example,
v1.2.0-beta). - What We Do NOT Collect: This request contains no personally identifiable information (PII), no server hostname, no IP storage details, no cluster topology, no storage volume metrics, and no hardware or MAC address identifiers.
- Purpose of Processing: This anonymous version data is aggregated strictly for statistical purposes—specifically, to quantify total deployment counts, measure release distribution across the community, and prioritize maintenance support for active release versions.
- Opt-Out Control: You retain full control over this feature. The version ping can be disabled at any time during installation or cluster configuration by setting the environment variable
RUSTFS_TELEMETRY=off(or as documented in our deployment guide).
2. Information Collected via Our Official Website
When you visit our website (rustfs.com), interact with our web services, or submit online forms, we collect limited personal data to provide user support and business communications.
A. Information You Voluntarily Provide
- Contact & Inquiry Forms:If you request enterprise support, fill out a "Contact Us" form, or sign up for product updates, we may collect your name, business email address, company name, and message details.
- Marketing Opt-In: If you explicitly opt in to receive news, event updates, or technical announcements, we process your email address based on your consent. You may withdraw your consent or unsubscribe at any time via the link at the bottom of our emails.
B. Automatically Collected Website Data
- Server and Security Logs: Website hosting, delivery, and security systems may process basic technical data (for example, browser type, operating system, referring URL, IP address, and timestamps) for service delivery, security auditing, network performance, and anti-abuse enforcement.
- Consent-Based Analytics: If you accept analytics technologies, Google Analytics may process visit, page usage, referring source, device, browser, IP address, and similar technical data to help us understand and improve website usage. Analytics is disabled until you consent, and advertising signals and ad personalization are disabled. Details are provided in our Cookie Policy.
3. Legal Grounds for Processing (GDPR Compliance)
Under European data protection laws (GDPR Article 6), we process personal data under the following legal bases:
- Legitimate Interest: Operating our website securely, analyzing aggregate deployment statistics (anonymous version counts), and responding to user inquiries.
- Consent: Sending marketing communications and newsletters where you have explicitly opted in, and operating optional website analytics after you accept them.
- Contractual Necessity: Delivering enterprise support, binary releases, or licensing services under a formal agreement.
4. Data Sharing, Selling, and Disclosure
We respect your data privacy and maintain a strict non-commercialization stance regarding personal information:
- No Data Selling: We do not sell, rent, trade, or monetize your personal information or usage statistics to third parties.
- Third-Party Service Providers: Website hosting, content delivery, security, form, and communications providers may process data on our behalf where needed to deliver their services. The contact form uses Web3Forms for submission delivery and hCaptcha for anti-abuse verification. Google Analytics processes website usage data only after analytics consent. We assess contractual, confidentiality, and data-protection safeguards as required by applicable law.
- Legal Requirements: We will only disclose information if required by a binding court order, subpoena, or legally enforceable government request.
5. International Data Transfers
RustFS operates globally. If you interact with our website or submit personal information from the European Economic Area (EEA), UK, or Switzerland, your data may be transferred to and processed in countries outside your jurisdiction, including the United States depending on the service involved. Where required, we use contractual or other legally recognized safeguards, assess applicable transfer requirements, and limit processing to the stated purpose. You may reject analytics to prevent analytics-related transfers.
6. Your Data Protection Rights
Depending on your jurisdiction (including under the GDPR, CCPA/CPRA, and PIPL), you hold the following rights regarding personal data held by us:
- Right to Access: Request details about the personal data we process.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your contact details or email subscription data.
- Right to Object & Opt-Out: Object to processing based on legitimate interest or opt out of marketing updates at any time.
- Right to Data Portability: Obtain a copy of your personal data in a structured format.
To exercise any of your rights, email us at hello@rustfs.com.
7. Security and Retention
We implement rigorous technical, organizational, and physical security controls (including TLS encryption, strict access controls, and boundary firewalls) to protect your information against unauthorized access, loss, or misuse. Personal contact data is retained only as long as necessary to fulfill the purpose for which it was collected or to comply with statutory legal retention requirements.
8. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect technical improvements, legal requirements, or operational changes. All revisions will be posted on this page with an updated "Last Updated" date.
9. Cookies and Similar Technologies
We use browser storage for requested preferences and privacy choices. Optional analytics technologies are disabled until you consent and can be disabled again at any time. Our Cookie Policy lists the technologies, providers, purposes, and retention periods and provides access to Cookie Settings.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or RustFS data practices, please contact our legal/privacy team:
hello@rustfs.com3550 Lenox Road, NE Atlanta, Georgia 30326