Privacy Policy

Last updated: July 14, 2026

Rival is a free Destiny 2 Crucible history tool. This policy explains what data we collect and why.

What we collect

• Bungie account data. When you sign in with Bungie, we store your Bungie membership ID, display name, and an encrypted OAuth access/refresh token. We use this to read your Crucible activity history from the Bungie API.
• Match data. Post-game carnage reports for your Crucible matches are imported and stored so the app can show your match history and your head-to-head record against players you have faced. A match report includes the public scoreboard: every player's display name, membership ID, team, and stats for that match.

How it's stored

Data is stored in our Supabase database. OAuth tokens are encrypted at rest (AES-256-GCM) and are only decrypted server-side to call the Bungie API on your behalf. We never see or store your Bungie password.

Third parties

We share data with the Bungie API (to read activity history), Supabase (database hosting), Appwrite (raw match report archive), and Vercel (app hosting). We don't sell your data or share it with advertisers.

Your data

You can revoke Rival's access at any time from your Bungie account settings. To request deletion of your account data from our database, contact us below.

Contact

Questions about this policy or your data? Reach out on GitHub.