diff --git a/PRIVACY.md b/PRIVACY.md
index af757b11..0e54e2c4 100644
--- a/PRIVACY.md
+++ b/PRIVACY.md
@@ -23,6 +23,30 @@ When you use Spotify, Apple Music, YouTube Music, Deezer, Tidal, lyrics provider
 
 Data handled by those services is subject to their respective privacy policies and terms.
 
+## Spotify Connect
+
+When a Spotify account is signed in, Sonora shows up as a Spotify Connect device by default, so Spotify's apps can see what it plays and control it. To do this, Sonora sends Spotify a device name and a device identifier.
+
+With the default naming, the device name contains the computer's hostname, as in "Sonora (my-laptop)". Every device signed in to the same Spotify account shows this name in its device list. The name can be changed to "Sonora" alone or to a custom name, and Spotify Connect can be turned off, in the settings.
+
+The device identifier is created once and kept on the device, so Spotify sees the same identifier every time Sonora starts. Starting, joining or managing a Jam sends this identifier to Spotify too.
+
+## Shared links
+
+Opening a spotify.link or Deezer short link (link.deezer.com, deezer.page.link or dzr.page.link) makes Sonora fetch that link from its host to find out where it points. The host receives the request like it would from a web browser.
+
+## Discord rich presence
+
+Discord rich presence is off by default. When it is turned on and Discord is running on the same computer, Sonora sends Discord the title, artist and album of the playing track, a link to its cover, and when it started. Discord shows this on the user's profile. By default the status also carries a button linking to the track on its provider. The settings can hide the track details, so the status only says that music is playing.
+
+When the track's provider has no public cover, or the track is a local file, Sonora searches Deezer's public catalog for one by the track's artist and album, or its title when it has no album, and sends that cover to Discord instead. For local files this search can be turned off in the settings.
+
+## Scrobbling
+
+Scrobbling is off until an account is linked in the settings. Sonora can scrobble to Last.fm, Libre.fm, ListenBrainz and a self-hosted Maloja server. A linked service receives the artist, title, album and length of each track played long enough to count, and when it was played. Last.fm, Libre.fm and ListenBrainz are also told which track is playing right now.
+
+The keys and session tokens that link these accounts are stored in Sonora's `settings.json`, which on Linux and macOS only the user can read.
+
 ## Authentication credentials
 
 Authentication credentials used by Sonora are stored locally on the user's device.
@@ -35,6 +59,8 @@ Credentials are sent only to the relevant third-party service when required for
 
 Sonora stores application data locally on the user's device, including settings, playback state, provider credentials, local-library information, and other application state required for the application to function correctly.
 
+By default, Sonora keeps the tracks you play on disk, so playing them again downloads nothing. This cache takes up to 2 GB, which can be changed in the settings, and Spotify keeps up to 1 GB more of its own files. Tracks you download are kept until you remove them. Played and downloaded tracks are encrypted with a key held in the operating system's keychain, or in a key file only the user can read when no keychain is available. Spotify's files stay encrypted under Spotify's own key. Turning off "Keep played tracks" deletes the played tracks and leaves downloads alone.
+
 ## Logs
 
 Sonora may write diagnostic logs locally on the user's device.