diff --git a/PRIVACY.md b/PRIVACY.md
new file mode 100644
index 0000000..19d0d9a
--- /dev/null
+++ b/PRIVACY.md
@@ -0,0 +1,38 @@
+# Privacy
+
+NotAlterra does not collect, store, or transmit any personal data. It has no network access and no telemetry.
+
+## What is stored locally
+
+The tool stores a small configuration file (`app.ini`) on your own machine. This file exists only to save you from re-entering your save folder path and backup location every time you run the program.
+
+The configuration file may contain:
+
+- Your Subnautica 2 save folder path (e.g., `C:\Users\YourName\AppData\Local\Subnautica2\Saved\SaveGames`)
+- Your chosen backup location (defaults to `~/NotAlterra`)
+
+These paths may reveal your system username. The information never leaves your computer.
+
+## No network, no telemetry, no tracking
+
+- NotAlterra makes no network connections.
+- It sends no data anywhere.
+- It includes no analytics, crash reporting, or usage tracking of any kind.
+
+## Your control
+
+- The configuration file is plain text. You can open it, edit it, or delete it at any time.
+- Deleting the file resets the tool to its default state (you will be prompted for paths again).
+- Backup archives are stored locally in your chosen location. NotAlterra never accesses them except when you explicitly choose to create or restore a backup.
+
+## What NotAlterra does not do
+
+- Does not collect or store playtime, save metadata, or any game-related content outside of your local backups.
+- Does not share any information with the developer or any third party.
+- Does not require an account, login, or internet connection.
+
+## Contact
+
+If you have privacy concerns, you can contact the maintainer directly using the information provided in [`SECURITY.md`](SECURITY.md).
+
+*This document is a good-faith description of NotAlterra's behavior. The tool is open source — you are encouraged to review the code yourself.*