What we keep, and why

Profiles, raid and dungeon history, Trials stats and match reports are public data from Bungie. We keep copies of them on our server so pages load quickly and Bungie isn't asked twice for the same thing. Anyone can see this data on Bungie.net too.

Your recent searches are remembered in your own browser only, never on our server.

The Item Manager, Armor Builder, Quests and your Triumphs need you to sign in. You approve access on Bungie.net; Destiny Portal never sees your password.

Bungie gives us a key that lets the site read your inventory and, when you ask, move, equip or lock your gear. That key is stored encrypted on our server and is only used for what you do on the site. Your browser holds a random session id, not the key.

Signing out deletes your session. Otherwise it ends when Bungie's access expires (about 90 days). You can also revoke access at any time in your Bungie.net settings under Linked Accounts → Authorized Applications.

Only two, both needed for sign-in, and neither tracks you:

• dp_session: keeps you signed in. Set only when you sign in; removed when you sign out.
• dp_oauth_state: protects the sign-in round trip to Bungie. Lasts 10 minutes.

Images from Bungie are loaded without cookies, so Bungie can't use them to follow you around this site.

The Weapon Lookup ranks weapons by what players use, counted from Bungie's public match reports. Players are stored only as a one-way code (a salted hash) so nobody is counted twice, never by name, and that data is deleted after 14 days.

The site's admins can give a profile a badge. A badge is stored against that Destiny account and shown on its profile.

Destiny Portal is a fan project, not affiliated with or endorsed by Bungie. For questions or to ask us to remove something, ask on our Discord.