Privacy Policy
Last updated: March 30, 2026
Short version: Loadouts does not collect, store, or share any personal data. Your Bungie credentials and Guardian data never leave your device or Bungie's own servers.
Overview
Loadouts ("the App") is a Destiny 2 companion app for iOS. This Privacy Policy explains how the App handles information when you use it. Because the App is designed to collect as little data as possible, this policy is straightforward.
Information We Do Not Collect
Loadouts does not collect, transmit, or store any personal information on external servers. Specifically, the App does not collect:
- Your name, email address, or any account credentials
- Your Bungie account details or Destiny 2 character data
- Device identifiers, advertising IDs, or usage analytics
- Location data
- Crash logs or diagnostics sent to third-party services
Authentication
To access your Destiny 2 loadouts, the App uses Bungie's official OAuth 2.0 authentication flow. This means:
- You log in directly on Bungie's own website — your password is never seen or handled by Loadouts
- Bungie issues an access token that the App stores securely in your device's iOS Keychain
- This token is used solely to make API requests to Bungie on your behalf
- The token is inaccessible to other apps and is never transmitted to any server operated by Loadouts
Bungie API
All Guardian and loadout data is fetched directly from the Bungie.net API. This data travels between your device and Bungie's servers only. Loadouts acts as a client — it does not operate intermediate servers, proxies, or data stores.
Bungie's own privacy practices are governed by the Bungie Privacy Policy.
In-App Purchases
Loadouts offers an optional Loadouts Pro subscription processed entirely through Apple's App Store via StoreKit. Purchase information and payment details are handled exclusively by Apple and are subject to Apple's Privacy Policy. Loadouts receives only a confirmation of entitlement status — no payment details.
Data Stored on Your Device
The App stores the following data locally on your device:
- Your Bungie OAuth access and refresh tokens (iOS Keychain)
- Loadout configurations you create within the App (local app storage)
This data never leaves your device except as required to communicate with Bungie's API. You can delete it at any time by removing the App from your device.
Children's Privacy
The App does not knowingly collect information from children under 13. It does not target children and contains no features designed to collect personal data from any user.
Changes to This Policy
If this policy changes in a material way, the updated version will be posted at this URL with a new "last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.
Contact
Questions about this Privacy Policy? Reach out at roman@polk.dev.