Is the generated policy legal advice?

No. It is a template built from your answers. Laws differ by country and by what your product really does, so have a lawyer read it before you publish, especially if you handle health, financial or children's data.

Does it work for mobile apps as well as websites?

Yes. Choose "Mobile or desktop app" or "Website and app", and tick the device permissions you use. App stores ask for a public privacy policy URL, so publish the HTML on your own domain and link to it.

Which regions does it cover?

Tick EU/EEA (GDPR), the United Kingdom, California (CCPA/CPRA) and India (DPDP Act 2023). Each adds the extra sections that law expects, such as legal bases, opt-out rights or grievance contact details.

What do the [square brackets] in the output mean?

They mark a detail you have not filled in yet, such as your company name or email. Fill the matching box and the placeholder disappears.

Is the information I type stored?

No. The policy is built in your browser and nothing you enter is uploaded or saved.

Privacy Policy for [Website or app name]

Last updated: 6 November 2026

1. Who we are

[Website or app name] (the "Service") is operated by [Company name] ("we", "us", "our"). This policy explains what personal data we collect through our website, why we collect it and the choices you have.

Questions about privacy can be sent to [privacy email].

2. Information we collect

Depending on how you use the service, we may collect:

Identity and contact data: your name and email address.
Technical data: IP address, browser type, device identifiers, operating system and time zone.
Usage data: pages or screens viewed, features used and how you move through the service.

3. How we use your information

To provide, secure and maintain the service.
To create and manage your account and sign you in.
To comply with legal obligations and enforce our terms.

4. Who we share it with

We do not sell your personal data. We share it only with service providers acting for us and where the law requires:

Hosting and infrastructure providers that store data on our behalf.
Authorities or advisers where the law requires it or to protect our rights.

5. Cookies and similar technologies

We use cookies and similar storage to keep you signed in, remember preferences and secure the service.

You can block or delete cookies in your browser settings, though some features may stop working.

6. How long we keep it

We keep personal data only as long as needed for the purposes in this policy, then delete or anonymise it.

7. Security

We use reasonable technical and organisational measures, such as encryption in transit and access controls, to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

8. Children's privacy

The service is not directed to children under 13 (or under 16 where local law sets that age), and we do not knowingly collect their data. If you believe a child has given us data, contact [privacy email] and we will delete it.

9. Your rights

To use any right, contact us at [privacy email]. We may need to verify your identity first.

Access the personal data we hold about you.
Correct data that is wrong or incomplete.
Delete your data, subject to legal limits.
Object to or restrict certain processing.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed, and we will tell you about material changes where the law requires it.

11. Contact us

[Company name]. Email: [privacy email].

Build the policy in four steps

A privacy policy has to describe what you actually do. This generator asks about your real data practices and writes only the sections that match them, so it never promises things you do not do.

1. Tell us who you are

Fill in the company name, the product name, your site address and a contact email. The email matters most: every privacy law expects people to be able to reach you about their data. Leave a box empty and the policy shows a [placeholder] so you cannot publish a gap by accident.

2. Tick the data you collect

Go through the list honestly. Include data your tools collect for you: analytics scripts gather device and usage data, a payment provider receives payment details, a social login passes along profile data. If you are unsure, check your own sign-up form and your browser's network tab.

3. Add services, children and regions

Analytics and ads add disclosures about third parties and cookies.
Children changes the wording. Most products should choose "not for children".
Regions add legal bases for GDPR, opt-out rights for California, and Data Principal rights plus a grievance route for India's DPDP Act.

4. Copy, download and publish

Switch between Preview, Markdown and HTML. Copy the format you need, or download a file. Publish the page at a stable URL such as /privacy, link it from your footer and from every sign-up form, and add the same URL to your app store listing.

Keep it accurate

Revisit the policy whenever you add a new tool that touches personal data.
Keep a record of the date you changed it. The generator stamps today's date as "last updated".
Pair the policy with a consent banner if you use non-essential cookies in the EU or UK.

This tool produces a template, not legal advice. Treat the output as a solid first draft and get it reviewed.

Privacy Policy Generator

About you

Data you collect

Services you use

Children, sharing and retention

Regions and laws