Privacy and data handling

This page explains what Vaexil.tv and its game sites collect, why, how long it is kept, and what happens when you connect a Bungie account.

Effective September 30, 2026.

Which sites this covers

-This page covers vaexil.tv and its game sites: destiny2.vaexil.tv, hitman.vaexil.tv, and sniperelite.vaexil.tv.
-For privacy questions or data requests, use the contact form or write to contact@vaexil.tv.

-Contact form submissions include your name, email address, organization, inquiry type, and message.
-Guide suggestions include the item, category, map, location description, notes, and an optional source URL. Map marker suggestions on the Hitman and Sniper Elite sites include the marker's position, label, description, and an optional source URL and note. Neither asks for your name or email.
-Suggestion and gallery votes are tied to a random ID in a first-party cookie, so the same browser cannot vote twice. No login is needed.
-First-party page counts record the page path, the referring page, and the time of the visit. They do not store your IP address, a cookie, or a device ID. They are skipped when your browser sends a Do Not Track signal, and admin pages are never counted.
-Vercel Web Analytics counts page views anonymously. It uses no cookies, reports only aggregated totals, and does not track you across other sites.
-Like any web host, Vercel processes IP addresses and request details to deliver and protect the sites, and keeps short-lived request logs.

-Connecting is optional. Everything on the site that does not need your gear works without it.
-When you connect, Bungie sends Vaexil an access token, a refresh token, and your Bungie membership ID. They are held in a sealed, encrypted, HTTP-only cookie that works across all four vaexil.tv sites, so one sign-in covers them. Page scripts cannot read it, and the tokens are not stored in our database. The cookie lasts until Bungie's refresh token expires or you disconnect.
-The grant includes permission to move and equip items in your Destiny account, because that is what the Armory does. Vaexil only ever transfers and equips. It never dismantles, never changes subclasses, sockets or mods, and never spends your materials.
-When a tool needs your characters, inventory, or activity history, our server reads them from Bungie. To keep the tools fast, an encrypted copy is cached on our host for up to five minutes, and a record of each item move you make is kept for 15 minutes so the same move is never applied twice. While a move runs, a short-lived lock stops two moves from colliding. These use a scrambled ID derived from your account, not your membership ID.
-Your inventory, tags, and loadouts are also kept in your own browser, along with tool settings. That copy is not uploaded to us.
-Disconnect at any time from the Armory. You can also revoke Vaexil from your Bungie account settings, which invalidates the tokens immediately.

-Saving a build keeps it in your browser. Nothing is sent anywhere.
-Submitting one to the community gallery is a publishing action: the build, its name, any notes you wrote, and the name you publish under are stored on our servers and shown publicly.
-If your Bungie account is connected, the build is published right away and stored with a scrambled ID derived from your account, so you can find and edit your own builds later. Without a connection, it waits for review before it appears.
-A shared build carries Bungie item hashes and the text you wrote. It does not carry your membership ID, your character, or per-item identifiers.

-Contact details are used to review collaborations, promotions, stream questions, and guide feedback.
-Community suggestions and votes help prioritize guide review, but Vaexil approval is required before anything becomes official.
-Page counts and analytics help identify useful pages, broken links, and performance issues.
-Nothing collected here is sold or used for advertising.

-A voting cookie holds the random voter ID for up to a year.
-Connecting your Bungie account sets the session cookie described above, plus two short-lived cookies that only last through the ten-minute sign-in step.
-Site admins have a separate sign-in cookie. Visitors never get it.
-The Destiny tools and map sites keep your inventory copy, saved builds, map progress, and tool settings in your browser's storage. It stays on your device, and clearing this site's data removes it.

-Vercel hosts all four sites, provides Web Analytics, and holds the short-lived encrypted Destiny cache.
-Turso stores guide data, suggestions, votes, contact messages, gallery builds, page counts, and admin settings.
-Cloudflare R2 stores map images and other site media.
-SendGrid delivers contact form notifications.
-Upstash holds the short-lived locks used while item moves run.
-Bungie handles sign-in and supplies all Destiny data, under Bungie's own privacy policy.

-Contact messages, suggestions, votes, and gallery builds have no automatic deletion schedule. Destiny data cached on our host expires within minutes.
-You can use the contact form, or write to contact@vaexil.tv, to ask for a correction or deletion of a prior submission, a gallery build, or your votes.
-Disconnecting removes the Bungie session cookie from your browser. Revoking Vaexil in your Bungie account settings ends access on Bungie's side.
-Admin access is protected and is not intended for public indexing.

-The sites are not directed at children under 13. Connecting a Bungie account is subject to Bungie's own age requirements. If a child has sent us a message or submission, ask and it will be deleted.

For privacy questions or data requests, use the contact form or write to contact@vaexil.tv.