Tell users how you handle their data
A privacy policy is a legal requirement almost anywhere you collect personal information — even just an email address or an analytics cookie. It must explain what you collect, why, who you share it with, how long you keep it, and what rights people have. This builder assembles a GDPR- and CCPA-aware policy tailored to the data you actually process.
How it works
You tick the categories of personal data you collect and the frameworks that apply. The generator writes the standard sections — who you are, data collected, how it is used, legal basis, third parties, storage and security, retention, user rights, cookies, children, and contact — and adapts the rights section per framework:
- GDPR adds access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint.
- CCPA/CPRA adds the right to know, delete, and opt out of sale or sharing, with a non-discrimination promise.
The retention clause uses the number of months you set, noting that legal record-keeping can require longer.
Tips and notes
List your real processors (payments, analytics, hosting) rather than leaving the clause generic, and keep the list current. If you use any analytics or marketing cookies, pair this policy with a cookie policy and a consent banner. Update the “last updated” date whenever your processing changes. This is a template, not legal advice — have a professional review it before you publish.