Update PRIVACY_POLICY.md

PRIVACY_POLICY.md

@@ -1 +1,119 @@
-# Privacy Policy
+# Privacy Policy
+
+**Last Updated: April 2026**
+
+Radium (“we”, “our”, or “us”) collects and uses data to operate the game, maintain security, and provide support. This policy explains what information we collect and how it is used.
+
+---
+
+## 1. Information We Collect
+
+We collect information required to operate Radium and manage user accounts.
+
+### Account Information
+
+* Username
+* Discord User ID (required for account creation and linking)
+* Email address (only if you choose to add one)
+* Passwords (securely hashed using PBKDF2 via ASP.NET Identity)
+
+### Technical Information
+
+* Encrypted IP address (stored per account)
+* Hardware-based Device IDs
+* Platform information (devices used to log in)
+* Last login time per platform
+
+### Gameplay & Activity Data
+
+* Room interactions and in-game activity
+* Chat and messages
+* Reports, moderation actions, and bans
+
+---
+
+## 2. How We Use Your Information
+
+We use collected information to:
+
+* Identify users across devices and sessions
+* Prevent ban evasion and enforce rules
+* Link Radium accounts to Discord users for access and support
+* Review moderation actions and resolve reports
+* Operate and maintain the game and its features
+
+---
+
+## 3. Data Security
+
+We take steps to protect your data:
+
+* IP addresses are stored in **encrypted form**
+* Passwords are **securely hashed** and never stored in plain text
+* Access to sensitive data is restricted to authorized use only
+
+---
+
+## 4. Data Sharing
+
+We do **not sell or share your personal data with third parties**.
+
+All data is handled internally and used only for operating Radium, except where disclosure is required by law.
+
+---
+
+## 5. Third-Party Services
+
+We use infrastructure services to operate Radium, including:
+
+* Hosting providers (VPS)
+* Authentication systems (IdentityServer)
+* Storage systems (S3-compatible storage such as MinIO)
+* Messaging systems (RabbitMQ)
+
+These services support the platform but do not receive your data for independent use.
+
+---
+
+## 6. Cookies
+
+Our website uses cookies only for session management (such as keeping you logged in).
+We do **not use analytics or tracking cookies**.
+
+---
+
+## 7. Data Retention
+
+We retain data as long as necessary to operate and secure the service.
+
+* Some temporary data, such as notifications and game invites, is automatically cleared
+* Other data is retained unless no longer needed for service operation or moderation
+
+---
+
+## 8. Account Control
+
+* Creating a Radium account is required to play
+* Accounts are currently **not self-deletable**
+* Data access and deletion requests may be supported in the future
+
+---
+
+## 9. Age Requirements
+
+Radium is **not intended for users under the age of 13**.
+We do not knowingly collect data from users under 13.
+
+---
+
+## 10. Changes to This Policy
+
+This policy may be updated over time.
+
+If any significant changes are made, we will notify users at least7 days in advance through the website before the changes take effect.
+
+---
+
+## 11. Contact
+
+If you have questions about this policy, you can reach out through official Radium or Rec Room Archive discord server.