0.3.3.1

PRIVACY.md

@@ -16,11 +16,19 @@ The Bot collects only the minimum data necessary to provide its intended functio
 2. Planet IDs (for planet-specific operations)
 3. Member IDs (for command execution context)
 4. Echo message mappings (command message ID → echoed message ID, used to delete echoed messages if the original is deleted)
+5. Pending marriage proposals (user ID pairs and expiry times, cleared on acceptance, decline, expiry, or restart)
+6. Pending divorce confirmations (user ID and expiry time, cleared on confirm, cancel, expiry, or restart)
+
+### Information Persisted to Disk
+
+The following data is written to a local SQLite database (`database.db`) and is retained across restarts:
+
+1. Marriage records — the Valour user IDs of both partners and the timestamp the marriage was created
 
 ### Information Never Stored
 
 1. Message content
-2. Direct Messages ("DMs")
+2. Direct messages sent by the bot to users as part of moderation actions
 3. Personal account information (including usernames, email addresses, or other personally identifiable information)
 
 ---
@@ -32,6 +40,7 @@ Temporarily held information is used exclusively to:
 1. Route commands to the correct channels and planets
 2. Enable core bot functionality during the current session
 3. Track echo message pairs to support automatic cleanup when the original command message is deleted
+4. Operate the marriage system (tracking active marriages and pending proposals/divorces)
 
 The Bot does not use any information for profiling, marketing, analytics, or tracking purposes.
 
@@ -39,13 +48,14 @@ The Bot does not use any information for profiling, marketing, analytics, or tra
 
 ## 3. Data Storage and Security
 
-All data is stored in-memory only and is automatically cleared when the Bot restarts. No data is written to disk or sent to any external storage or cloud service.
+In-memory data is automatically cleared when the Bot restarts. Marriage records are written to a local SQLite database file (`database.db`) on the machine running the bot. No data is sent to any external storage or cloud service.
 
 The Bot does not sell, rent, trade, or otherwise share any data with third parties.
 
-The Bot makes outbound requests to the following third-party APIs. These requests do not include any user data:
+The Bot makes outbound requests to the following third-party APIs:
 
-- **NuGet** (api.nuget.org) — fetched by the `version` command to check the latest Valour SDK version
+- **NuGet** (api.nuget.org) — fetched by the `version` command to check the latest Valour SDK version. No user data is included.
+- **nekos.best** (nekos.best) — fetched by the `emote` command to retrieve animated GIFs. No user data is included.
 
 ---