Question 1 of 10
What is the business called?
The legal or trading name. It appears throughout the document.
Enter to continue
Ready
Privacy Policy
This is a starting point, not legal advice. It reflects what you told us about your site. If you handle health data, financial records, or information about children, have a lawyer review it.
Your answers were assembled in this browser. The share link keeps them in the URL fragment, which browsers do not send to a server.
What this generator asks, and what it writes
Ten questions produce a document of 12 sections. Answers change the wording, not just the blanks, so two sites with different obligations get different policies.
The questions
What is the business called?
The legal or trading name. It appears throughout the document.
What is the website address?
One domain per policy. Include the protocol.
How should people contact you about their data?
Privacy law expects a route that a person can actually use.
Choices: Email address, Contact form on the site, Mailing address, Email and mailing address.
What is the address?
This is printed in the contact section exactly as written.
What do you collect from visitors?
Pick everything that applies. Each one adds a line to the collection section.
Choices: Names and email addresses, Payment details, Messages sent through forms, Account credentials, IP addresses and device data, None of these.
What measures traffic on the site?
Third party analytics has to be disclosed by name.
Choices: Google Analytics, Server logs, A privacy-first analytics tool, Nothing at all.
Which cookies does the site set?
Advertising cookies change what the sharing section has to say.
Choices: Essential only, Essential and analytics, Essential, analytics, and advertising.
Do you sell or share personal information?
California defines sharing broadly. Ad partners usually count.
Choices: No, never, Only with service providers acting on our behalf, Yes, with advertising partners.
Where are your visitors?
California adds CCPA rights. The EU or UK adds GDPR.
Choices: United States, California, European Union or UK, Canada.
When does this take effect?
Usually the day you publish it.
The sections it writes
Introduction
Names the operator, the site the policy covers, and the sites it does not.
Who we are
Identifies the party accountable for the information described.
How to reach us
Gives a working route for access, correction, and deletion requests.
Information you provide
Lists what a visitor hands over directly, drawn from the collection answers.
Information collected automatically
Covers server-side logging and what the site does not build from it.
Cookies and similar technologies
States which cookie categories the site sets and what blocking them costs.
Analytics and measurement
Names the measurement tools in use, since third parties must be disclosed.
How we use information
Explains purpose limitation and rules out automated decision making.
Sharing and disclosure
Distinguishes service providers from sale or cross-context advertising.
Retention and security
Sets a retention principle and describes safeguards without overclaiming.
Your privacy rights
Grows or shrinks with the regions selected, adding CCPA, GDPR, or PIPEDA language.
Effective date and changes
Fixes the effective date and commits to posting revisions in the same place.