diff --git a/src/main.c b/src/main.c
index 5ca8d56..2835c81 100644
--- a/src/main.c
+++ b/src/main.c
@@ -666,8 +666,10 @@ static void parse_config(GKeyFile *config)
 	} else {
 		DBG("privacy=%s", str);
 
-		if (!strcmp(str, "device"))
+		if (!strcmp(str, "network") || !strcmp(str, "on"))
 			btd_opts.privacy = 0x01;
+		if (!strcmp(str, "device") || !strcmp(str, "limited"))
+			btd_opts.privacy = 0x02;
 		else if (!strcmp(str, "off"))
 			btd_opts.privacy = 0x00;
 		else {
diff --git a/src/main.conf b/src/main.conf
index e05291d..4019ea9 100644
--- a/src/main.conf
+++ b/src/main.conf
@@ -67,8 +67,14 @@
 
 # Default privacy setting.
 # Enables use of private address.
-# Possible values: "off", "device", "network"
-# "network" option not supported currently
+# Possible values: "off", "network/on", "device/limited"
+# "network/on": a device will only accept advertising packets from peer devices
+# that contain private addresses. It may not be compatible with some legacy
+# devices since it requires the use of RPA(s) all the time.
+# "device/limited": A device in device privacy mode is only concerned about the
+# privacy of the device and will accept advertising packets from peer devices
+# that contain their Identity Address as well as ones that contain a private
+# address, even if the peer device has distributed its IRK in the past.
 # Defaults to "off"
 #Privacy = off