Why every website needs a privacy policy
If your site collects anything about visitors — a contact form, analytics, cookies, a newsletter sign-up — the law in most places expects you to tell people what you collect, why, and what their rights are. In the UK and EU that's the GDPR; in parts of the US it's laws like the CCPA. Beyond the law, it's also a requirement of the services you'll likely use: Google AdSense, Analytics, Stripe and the app stores all require a published privacy policy.
What this tool does
It assembles a clear, readable policy from the choices you make on the left — only including the sections that apply to your site, and adapting the “your rights” wording to your region. It also produces a matching terms of service. Everything is generated in your browser; copy it, download it, or print to PDF, then publish it at /privacy and /terms on your site.
For people launching something
Plain notes on getting online properly, once a week
Domains, hosting, legal basics and looking professional. No noise, unsubscribe in one click.
Common questions
Is this legally binding / is it legal advice?
No. This is a starting-point template that covers the usual ground for a typical small website. It isn't legal advice, and complex sites (health data, children, large-scale tracking, regulated industries) should have a policy reviewed by a solicitor. Always read what it produces and edit it to match what you actually do.
Where do I put the policy?
Publish the privacy policy on its own page — most sites use /privacy — and link to it in your footer. Do the same for terms at /terms. If you run ads or analytics, also link the privacy policy from your cookie banner.
Is my information stored anywhere?
No. The generator runs entirely on your device; the details you type are saved only in your own browser so you don't have to retype them, and never sent to us.
Do I need a cookie banner too?
If you use non-essential cookies (analytics or advertising) and have UK/EU visitors, yes — you need consent before those cookies are set. Ad networks like Google provide a consent message you can switch on; otherwise use a consent tool. The policy this generates explains the cookies; the banner gets the consent.