Osmium
Early access

Osmium Admin privacy policy

Updated 12 October 2026

Osmium Admin for Rust (“the app”) is an iPhone app for people who run Rust game servers. It is made by Cynic Hosting LLC (“we”). This policy covers the app, the Secure Link relay at relay.osmiummod.com that the app can use, and how the Osmium Admin Link server plugin talks to that relay. Questions: support@cynic-hosting.com.

1In short

  • You do not make an account with us. The app never asks for your name, e-mail address or phone number.
  • Your server passwords and panel keys stay on your phone.
  • The app talks straight to your own servers and panels. What it shows you about your players comes from your server and is not sent to us.
  • The app contains no ads, no advertising or analytics kits and no tracking. We do not sell or share your data, and we do not track you across other apps or websites.
  • Diagnostics are off by default. They leave your phone only if you switch sharing on, or when you send us a one-off report yourself.
  • The demo (“Try the demo”) runs entirely on your phone with sample data. It connects to no server and sends nothing.

2What stays on your phone

  • Your servers: the name you give each one, its RCON address and port, its panel address and server identifier, and your notes, in the app’s own storage.
  • Passwords and keys: RCON passwords and panel API keys are kept in the iOS Keychain, readable only while your phone is unlocked and marked “this device only”, so they are never synced to iCloud Keychain or moved to another phone. The app can lock itself behind Face ID or your passcode. iOS does that check; the app only learns whether it passed and never sees your face data.
  • Secure Link keys: the phone’s private key and its relay token, in the Keychain on this device only, shared only with the app’s own notification extension so it can decrypt alerts.
  • Things the app keeps to work faster or offline: map files and map images, server banner and logo images, player avatars and Steam names (refreshed after three days), lists of server settings, graphs of server performance, your notification history (the latest 1,000), and a log of the app’s own activity (connections, errors and timings, already stripped of the things listed in section 6, kept for up to 7 days). You can view, export and clear that log in the app.

Removing a server in the app deletes its password and key. Deleting the app deletes its files. iOS can keep an app’s Keychain entries after the app is deleted, readable only by this app on this phone, so remove your servers first if you want those gone too.

3What goes straight to your servers

These connections go from your phone to addresses you entered. They do not pass through us, and we cannot see them.

  • RCON: the app connects to the RCON address of your server. Rust’s RCON is not encrypted: the password and everything on the console travel in the clear unless the address is on a private network. The app warns you when it is not, and Secure Link (section 5) is the encrypted alternative.
  • Host panels: with a Pelican or Pterodactyl client API key, the app calls your panel’s API and console directly. Your panel host’s own privacy policy applies to that panel.
  • If a server or panel is on your local network, iOS asks before the app may reach it, and the app uses that permission only for those addresses.
  • Like any connection, your servers and panels see your phone’s IP address.

Your server reports its players to you: names, SteamIDs, ping, connection addresses, chat, positions, inventories and F7 reports. The app shows them to you and keeps only the caches listed in section 2 on your phone. As the server’s operator you decide what your server collects about its players.

4Other services the app contacts

  • Steam Community: to show a player’s avatar and Steam name, the app reads that player’s public profile from steamcommunity.com, without cookies and without any Steam account. Valve sees your IP address and which public profiles were read. A Steam profile link opens in your browser only when you tap it.
  • Images and maps chosen by server owners: a server’s banner and logo, panel icons, and a custom map file come from whatever web address the server or panel names. That host sees your IP address and the request. Images are fetched without cookies or stored logins.
  • Apple Push Notification service: if you allow notifications, Apple delivers them (section 5).

5Secure Link relay

Secure Link is optional. It is used only when you pair the app with a server that runs the Osmium Admin Link plugin. The relay at relay.osmiummod.com is run by us and passes traffic between your phone and your server, so the server needs no open port.

Everything between your phone and your server is end-to-end encrypted with keys that only your phone and your server hold: console, commands, player data, reports and notification text. The relay forwards it and cannot read it.

The relay stores:

  • for your phone: a random device id, its public key, a hash of its access token, its Apple push token if you allow notifications, and when it last connected;
  • for each pairing: the phone and server ids, the device name you choose (shown on your server’s console; “iPhone” unless you change it) and when it was made. A pairing request expires after 10 minutes;
  • for each server running the plugin: a random server id, its public key and a hash of its access token;
  • encrypted events and notifications waiting for a phone that is offline: deleted once delivered, and in any case after 7 days (at most the newest 500 per server).

Push notifications reach Apple with the generic text “New alert” and the encrypted content. Your phone decrypts them. Apple and the relay see only the server’s random id, the priority and the time.

The relay uses your connection’s IP address in memory to limit abuse and does not record it. Connections reach the relay through Cloudflare, which processes them under its own privacy policy.

Pairings last until you remove them, in the app or with oal.revoke on the server. A phone or server with no pairings that has not connected for 90 days is deleted. The relay’s daily backups are kept for 14 days, so deleted records leave the backups within 14 days.

6Diagnostics (off by default)

Sharing diagnostics is off by default. The app’s activity log goes to our relay in only two cases, both your choice in Settings > Diagnostics:

  • Share diagnostics switched on: from that moment, until you switch it off, the app uploads new log entries while it is open.
  • Send a report now: one report, sent once when you tap it, even while sharing is off. It holds the last 24 hours of the log and a note if you write one.

The log contains app events (launches, which screens were opened, connection results, error codes and timings), crash and hang reports from iOS, the app and iOS versions, the phone model, display and accessibility settings such as text size, the network type (Wi-Fi or cellular), a random id made for this installation and, if you use Secure Link, your phone’s relay id.

Before anything is written, even on your phone, the log is stripped of passwords, keys, tokens, pairing codes, IP addresses, e-mail addresses, Steam ids, console commands, chat and names. Server and panel addresses are replaced by scrambled codes made with a secret that never leaves your phone, so we cannot tell which servers you use. A report’s note is stripped the same way. Nothing outside the app, such as your location or contacts, is ever recorded.

Uploaded diagnostics and reports are kept for 30 days. Turning sharing off stops uploads, and “Delete my uploaded data” on the same screen deletes everything this installation sent, reports included. You can also write to us. The Osmium Admin Link plugin has its own diagnostics setting for server operators, also off by default.

7TestFlight

While the app is in beta it is delivered through Apple’s TestFlight. Apple shares with us what its TestFlight terms describe, such as the feedback and screenshots you choose to send, crash reports, and basic usage like install dates and session counts. We use them only to fix and improve the app.

8How we use and share data

We use what the relay holds only to deliver Secure Link and notifications, and diagnostics only to find and fix problems in the app and the plugin. We do not sell data, use it for advertising, build profiles or give it to anyone, except Cloudflare and Apple as described above, or where the law requires it.

The app is a tool for server operators and is not directed at children under 13.

9Your choices

  • Everything in section 2 is on your phone and under your control.
  • Secure Link, notifications and diagnostics are each optional.
  • To see or delete what the relay holds for your phone, write to support@cynic-hosting.com.

10Changes and contact

If this policy changes, the date at the top changes with it.

Cynic Hosting LLC, support@cynic-hosting.com.

Rust is a trademark of Facepunch Studios. Osmium Admin is not made by, affiliated with or endorsed by Facepunch Studios.