Privacy Policy Generator
A privacy policy has one honest job: describe what your site actually collects and what happens to it. Generic templates describe every data practice ever invented, which is how sites end up promising rights they never implemented, or claiming they never sell data while running personalized advertising. This generator works from checkboxes about what your site genuinely does — advertising, analytics, newsletters, orders, accounts — and writes only the sections those answers produce. Tick "advertising" and it emits the specific disclosures Google requires of AdSense publishers, including the opt-out links to Google Ads Settings and aboutads.info; tick GDPR or CCPA and the lawful-basis and consumer-rights sections appear. Just as valuable is what it refuses to pretend: the warnings will tell you where a privacy policy alone is not enough — such as the consent banner EU visitors need before ad scripts load, or the opt-out link California advertising requires beyond the words of the policy.
Must be a mailbox you actually read.
Shown as 'last updated'. Fill it in when you publish.
Fill in: Site name, Site URL, Contact email — placeholders remain until you do.
PRIVACY POLICY
Last updated: [DATE]
This Privacy Policy explains how [SITE NAME] ("we", "us") collects, uses and protects information when you visit [SITE URL] (the "Site"). We collect only what the Site needs to work, and this page tells you exactly what that is, what we use it for, and what choices you have.
1. Information we collect
Information you give us:
• Contact and support — if you email us or use a contact form, we receive the name, email address and contents of your message.
• Technical records — like most websites, we log your IP address, browser type, referring page, pages viewed and timestamps when you browse.
2. How we use information
We use the information above to operate, secure and troubleshoot the Site; respond to your messages; comply with the law and prevent abuse.
We do not sell personal information to anyone, and we do not share it with third parties except the service providers listed in section 4, or where the law requires it.
3. Cookies and similar technologies
Essential cookies keep the Site working and remember preferences such as your settings. You can block or delete cookies in your browser at any time; parts of the Site may then stop working.
4. Third-party services
We share information only with the services that operate the Site (at present, none). Each processes data under its own privacy policy. We do not otherwise disclose personal information except to comply with law, enforce our terms, or protect the rights and safety of the Site and its users.
5. Retention and security
We keep personal information only as long as the purposes above require, then delete or anonymize it. We protect it with reasonable technical and organisational measures. No method of transmission or storage is perfectly secure, so we cannot promise absolute security.
6. Your rights and choices
Everyone else: email [CONTACT EMAIL] and we will help with the equivalent requests.
7. Children
The Site is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, email [CONTACT EMAIL] and we will delete it.
8. Changes to this policy
We will post any changes on this page and update the "last updated" date. Significant changes will be flagged more prominently.
9. Contact
Questions about this policy: [CONTACT EMAIL] — or write to us through the contact page on [SITE URL].This generator writes the policy, not your compliance. Only tick what is genuinely true — a policy describing data practices you don't have is worse than no policy. Set the date when you publish it.
How to use Privacy Policy Generator
- 1
Enter your site details
Site name, URL and a contact email you actually read. Regulators and users judge a policy partly by whether its contact works.
- 2
Tick what your site genuinely does
Advertising, analytics, newsletter, orders, accounts, plus the regions you serve. Only the matching sections are written — leave a box unticked if the practice is not real.
- 3
Copy, date and publish
Paste the generated policy onto its own page, fill in the effective date, link it from your footer, and read the warnings about banners and opt-outs that the words alone cannot cover.
Why use this tool
- Only the sections your site's real data practices produce
- Emits the AdSense disclosures Google actually requires
- GDPR lawful bases and rights for EU/UK visitors
- CCPA/CPRA rights, including the personalized-ads "sharing" nuance
- Warns where a policy alone is not compliance
- Everything generated locally — nothing you type leaves the browser
Frequently asked questions
- Is a privacy policy legally required for my website?
- Almost certainly yes in practice. GDPR covers any site serving people in the EU/UK, the CCPA covers for-profit sites serving California residents, and advertising networks including Google AdSense require every publisher to have one. A site with no tracking at all can sometimes skip one, but the moment you add analytics, a newsletter form or ads, a policy is expected.
- What does AdSense require in a privacy policy?
- Google requires publishers to disclose the use of third-party advertising cookies, explain that vendors including Google serve ads based on prior visits to the site and other sites, and link to opt-out mechanisms — Google Ads Settings and aboutads.info — plus Google's partner-site technology page. This generator emits exactly that block when you tick advertising, rather than a generic "we may use cookies".
- Does publishing a privacy policy make me GDPR compliant?
- No, and any template implying otherwise is selling you short. For EU/UK visitors, advertising and analytics cookies generally need consent collected before those scripts load — which means a consent banner — and the policy is where you document the lawful bases and how to exercise rights. The policy is one part; this tool warns you about the parts it cannot write for you.
- Can I copy another site's privacy policy?
- You can copy it, and that is the problem: it will describe their vendors, their retention, their contact and their practices, not yours. A policy that misdescribes your data handling is worse than a short one that is accurate — it misleads users and can itself breach consumer-protection rules. Answering seven checkboxes takes less time than auditing someone else's wording.
- Do I need both a GDPR and a CCPA section?
- If you serve both regions, yes — they protect different rights. GDPR gives EU/UK residents rights over processing grounded in lawful bases; CCPA/CPRA gives Californians rights to know, delete and opt out of "sale" or "sharing" of personal information. Personalized advertising is where they most often overlap: consent applies under GDPR, and opt-out rights apply under CPRA. The generator writes both sections when both boxes are ticked.
- How often should I update my privacy policy?
- Whenever what you do changes — new analytics tool, new ad network, a newsletter launch — and at least annually as a review habit. Update the date whenever the wording changes materially, because an unchanged date on a policy you just edited is its own misstatement.
- Does this generator upload the details I type?
- No. The policy is assembled in your browser by JavaScript, and nothing you enter — site name, email, URL — is transmitted or stored on a server.
Generate a mutual or one-way NDA free. Covers the standard exclusions, survival period and compelled disclosure that free templates skip. No sign-up.
Generate a refund policy for goods, digital products or services. Warns when your choices collide with posting laws and the EU 14-day right. Free.
Calculate the late fee on an overdue invoice free. Enter the amount, days late and monthly or annual rate to get the exact interest and new balance.