Legal

Updated 18 October 2026

1Terms of use

Osmium, Osmium Admin and this site belong to Cynic Hosting LLC.

Osmium is proprietary software. It is not open source and is not offered under any open-source licence. Anyone may download and run it, with no invitation and no account, under the Osmium Terms of Use, which every Osmium installation also carries (the osmium.terms console command prints them). Those terms are the licence: they say what you may and may not do with Osmium, and what it sends to us (section 6 there).

Without written permission from Cynic Hosting LLC you may not copy, modify, publish, distribute, sublicense, sell, rent, lend, host for others or otherwise make available any part of Osmium, in source or compiled form, nor reverse engineer a compiled build except where the law expressly allows it. A permission covers only what it names and can be withdrawn.

This site and the Osmium Admin web panel are provided “as is”, without warranty of any kind. To the extent the law allows, Cynic Hosting LLC is not liable for any claim, damages or other liability arising from their use. The warranty and liability terms for the software are in the Terms of Use.

Rust is a trademark of Facepunch Studios. Osmium and Osmium Admin are not made by, affiliated with or endorsed by Facepunch Studios.

The typefaces on this site, Chakra Petch and Saira, are used under the SIL Open Font License 1.1.

2This site

This site sets no cookies and has no forms. It has no analytics and loads nothing from anyone else: its fonts and images are served from this domain, its pages run no scripts, and no script from another site is allowed to run anywhere on it. That matters because the web panel (section 3) keeps your vault at this same address.

Requests to this site pass through Cloudflare, which processes them under its own privacy policy.

Our server records each request for a page or file of this site: the time, the address it came from, the page asked for, the response, the referring page and the browser’s identification string. These records are used only to run and protect the site, and are not sold or used for advertising. Requests the web panel makes to the relay and to the panel proxy (section 3) are not recorded.

They are deleted automatically after 15 days.
Requests that look like probes for weaknesses, such as attempts to read configuration files, are also kept in a security log for up to one year.

3The Osmium Admin web panel

The web panel at osmiummod.com/panel runs in your browser. There are no accounts: setting up a browser is the sign-up, and unlocking it is the sign-in.

Your vault stays in your browser. Your host panel API keys, this browser’s Secure Link identity, your pairings, server profiles, settings and command history are kept only in this browser’s storage for this site, sealed with AES-256-GCM under a key that only your passphrase, or a passkey you add, can open. We never receive your passphrase, your keys or the vault, and we cannot recover them: if you forget the passphrase, you reset the browser and pair again. To move to another browser you export an encrypted file yourself; it does not pass through us.

The browser also keeps, on your device only: map files, the history of your notifications (the newest 1,000), the keys that let it show a notification while the vault is locked, its diagnostics log (below) and a few display choices.

The web panel reaches a server in two ways only:

Secure Link, through our relay, to a server that runs the Osmium Admin Link plugin. Everything between your browser and your server is end-to-end encrypted with keys that only they hold: console, commands, player data, reports and notification text. The relay forwards it and cannot read it.
Your host panel’s API key (Pelican, Pterodactyl or Calagopus). Host panels do not accept calls from other websites, so your browser reaches them through our panel proxy.

To install the plugin on a server without a host panel, the web panel uses the server’s RCON for that one step, through the panel proxy. Rust’s RCON is not encrypted between the proxy and your server, and the web panel says so before it uses it.

The relay (also used by the iPhone app) stores:

for your browser: a random device id, its public key, a hash of its access token, its push subscription if you turn on notifications, and when it last connected;
for each pairing: the browser and server ids, the device name you choose (shown on your server’s console) and when it was made. A pairing request expires after 10 minutes;
for each server running the plugin: a random server id, its public key and a hash of its access token;
encrypted events and notifications waiting for a device that is offline: deleted once delivered, and in any case after 7 days (at most the newest 500 per server).

The relay uses your connection’s IP address in memory to limit abuse and does not record it. Pairings last until you remove them, in the web panel or with oal.revoke on the server. A device or server with no pairings that has not connected for 90 days is deleted. The relay’s daily backups are kept for 14 days, so deleted records leave the backups within 14 days.

Notifications are off until you turn them on. Then the relay sends each one, still end-to-end encrypted, through the push service of your browser’s maker (Google, Mozilla, Apple or Microsoft), which delivers it to your browser. The push service sees an encrypted message, its size, its time and its priority, not what it says. Your browser decrypts it and shows it.

The panel proxy passes your browser’s requests to the host panel you added, along with its console and file transfers, and the one-time RCON connection above. Like any proxy it handles your panel key and that traffic while a request is in flight. It stores nothing and records no request: no address, path, key or content, only running totals.

Steam avatars. To show players’ avatars, the web panel sends their SteamIDs to the panel proxy, which asks Steam with our own Steam Web API key and keeps the answers in memory for up to six hours. The pictures then load from Steam’s image servers, which see your IP address.

Diagnostics are off by default. The web panel’s activity log goes to our relay only if you switch on Share diagnostics, or tap Send a report now (one report, even while sharing is off). The log is stripped of passwords, keys, tokens, pairing codes, IP addresses, e-mail addresses, Steam ids, console commands, chat and names before it is written, even in your browser. Uploads are kept for 30 days, and Delete my uploaded data removes everything this browser sent.

The iPhone app has its own privacy policy.

4The Osmium software

Osmium contacts us once, at first use. When you accept the Terms of Use, it registers your acceptance and the version you accepted, together with the server’s identity and platform and its IP address as we see it, and collects the server’s perpetual licence and its analytics token. That activation is the only contact Osmium needs: after it, the server keeps working whether or not it can reach us. A server upgraded from Osmium 0.3 makes one exchange of its old licence instead.

Everything else is off by default. Error reports, performance detail, and the upload of plugin and configuration files with secrets redacted are sent only if the operator turns them on, and any of them can be turned off again at any time. Whatever is turned on is sent with the server’s analytics token, which identifies the server for those categories and nothing else: it is not the licence and cannot get one. We keep error reports for 180 days, performance detail for 30 days, and uploaded files as the latest copy plus 90 days of changes; acceptance and activation records are kept for as long as we operate Osmium. In no category do we collect player names, SteamIDs, player IP addresses, chat or RCON passwords. The complete list is section 6 of the Terms of Use.

Activation and analytics are served by our hub at panel.osmiummod.com. It has no accounts, no hosted panel and no way to link or control a server. For each activated server it stores the server’s public key and id, the licence we issued, the version of the Terms accepted with when and from which address, the platform facts above, and whatever the operator chose to send. We keep a log of activations and of our administrative actions for 180 days.

There are no Osmium Connect accounts. The earlier hosted panel, Osmium Connect, no longer exists. If you had an account there, we keep the account and panel records we held then only as long as the law requires or until you ask us to delete them.

5Contact

Questions, and requests to see or delete what we hold: support@cynic-hosting.com, Cynic Hosting LLC.