Free Privacy Policy Generator for Websites & Apps

GDPR, CCPA and cookie-ready privacy policy. Fill in the form and your policy updates live.

100% free No sign-up Copy, HTML or download
Your business

1 Your business

Your website

2 Your website

Data you collect

3 Data you collect

What personal data do you collect?

How do you use it?

Third parties

4 Third parties

Which third-party services do you use?

Compliance

5 Compliance

Live preview

Privacy Policy

Last updated: November 2, 2026

This Privacy Policy explains how [Business Name] ("we", "us" or "our") collects, uses and protects your personal information when you use our website at [website URL] (the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.

Information We Collect

We collect information that you give us directly, and some information automatically when you use the Service.

Information you provide

  • Your name and email address
  • The content of messages you send us through contact forms, email or chat

Information collected automatically

  • Your IP address, browser type, device type, operating system and the pages you visit
  • Information collected through cookies and similar technologies

How We Use Your Information

We use your information to:

  • Provide, operate and maintain the Service
  • Respond to your questions and provide customer support
  • Understand how visitors use the Service so we can improve it
  • Detect and prevent fraud, abuse and security issues
  • Comply with our legal obligations

Cookies and Tracking Technologies

We use cookies and similar technologies to keep the Service working, remember your preferences and understand how the Service is used. Cookies are small files stored on your device.

You can set your browser to refuse all cookies or to alert you when cookies are being sent. Some parts of the Service may not work properly without cookies.

How We Share Your Information

We do not sell your personal information. We only share it in the following cases:

  • With service providers who help us run the Service, listed below
  • When required by law, or to protect our rights, users or the public
  • In connection with a merger, sale or transfer of our business
  • With your consent

Third-Party Services

We use the following third-party services:

  • Google Analytics, to understand how visitors use our website. Google may collect information such as your IP address and browsing activity. You can opt out using the Google Analytics Opt-out Browser Add-on.
  • A live chat and AI chatbot provider (such as ChatMox), to answer your questions. Messages you send in the chat are processed to generate replies and may be stored so our team can follow up.
  • Hosting and cloud service providers, to store data and run the Service.

Data Retention

We keep personal information only for as long as needed to provide the Service and for the purposes described in this policy, unless a longer period is required by law.

Data Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS). However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict how we use it. To make a request, contact us at [contact email]. We will respond within the time required by law.

GDPR Rights (European Economic Area and UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: to perform a contract with you, with your consent, to meet legal obligations, and for our legitimate interests (such as improving and securing the Service). You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time, where we rely on consent
  • Lodge a complaint with your local data protection authority

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, use and disclose; the right to request deletion or correction of your personal information; the right to opt out of the sale or sharing of your personal information; and the right not to be discriminated against for exercising these rights.

We do not sell personal information. To exercise your rights, contact us at [contact email].

Children's Privacy

The Service is not intended for anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

International Data Transfers

Your information may be processed in countries other than the one you live in. Where required, we use appropriate safeguards to protect your information when it is transferred.

Links to Other Websites

The Service may contain links to other websites. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date. Please review this page regularly.

Contact Us

If you have any questions about this policy, please contact [Business Name]:

  • Email: [contact email]
  • Website: [website URL]

This generator gives you a professional starting point, not legal advice. Review the policy and check the laws that apply to your business.

Let AI answer questions about this policy

Add it to ChatMox and your website chatbot answers "What do you do with my data?" 24/7.

Try ChatMox free

How to create your privacy policy in 3 steps

01

Describe your website

Enter your business details and choose your site type: website, store, SaaS or app.

02

Choose data and services

Tick the data you collect, how you use it and tools like Google Analytics, AdSense or Stripe.

03

Publish the policy

Copy or download your privacy policy and link to it from your website footer.

Create a privacy policy for your website, online store or app. Choose the data you collect and the services you use, and get a clear policy with GDPR and CCPA sections. Free, no sign-up needed.

What is a privacy policy?

A privacy policy is a public page that explains what personal information a website or app collects, why it collects it, who it shares it with, how long it keeps it and how people can control their data. It is written for your visitors and customers, so it should be clear and specific rather than vague legal text.

Is a privacy policy required by law?

If your website collects any personal data, even just an email address in a contact form or an IP address through Google Analytics, privacy laws such as the GDPR (EU and UK), CCPA (California), CalOPPA, PIPEDA (Canada) and many others require you to have one. Google AdSense, Google Analytics, the Apple App Store and Google Play also require a privacy policy.

What should a privacy policy include?

  • Who you are and how to contact you
  • What personal information you collect, both what people give you and what is collected automatically
  • How and why you use it
  • Cookies, analytics and advertising tools
  • Third parties you share data with, such as payment, email and hosting providers
  • How long you keep data and how you protect it
  • Users' rights and how to use them
  • Children's privacy and the minimum age of users
  • International data transfers
  • The date the policy was last updated

GDPR basics in plain language

The GDPR applies to you if you are based in the EU, or if you offer goods or services to people in the EU or track their behavior online, even when your business is located elsewhere. The UK has its own version (UK GDPR) with almost the same rules.

Under the GDPR you need a legal basis for each use of personal data, such as consent, a contract with the person, a legal obligation or your legitimate interests. Your privacy policy must say what those bases are, how long you keep data, who receives it, whether it leaves the EU, and that people can access, correct, delete or export their data and complain to a data protection authority. Non-essential cookies, such as advertising cookies, generally need consent before they are set.

CCPA / CPRA basics in plain language

The California Consumer Privacy Act, as amended by the CPRA, applies to for-profit businesses that collect personal information from California residents and meet at least one threshold: annual gross revenue above a set amount (originally $25 million, now adjusted for inflation), buying, selling or sharing the personal information of 100,000 or more consumers or households, or earning half or more of revenue from selling or sharing personal information.

Covered businesses must list the categories of personal information they collect, explain the rights to know, delete, correct and opt out of the sale or sharing of data, and update the policy at least once every 12 months. Separately, California's CalOPPA requires any commercial website or app that collects personal information from California residents to post a privacy policy, whatever its size.

Sample privacy policy

Here is a short example for a small website that uses a contact form, Google Analytics and a chatbot. The generator above builds a longer, more complete version from your answers.

Privacy Policy

Information we collect

When you contact us, we collect your name, email address and the content of your message. When you visit our website, we automatically collect your IP address, browser type and the pages you view through cookies and Google Analytics.

How we use it

We use your information to answer your questions, run and improve our website, and keep it secure. We do not sell your personal information.

Who we share it with

We share data only with service providers that help us run the website, such as our hosting provider, Google Analytics and our chat provider, and when the law requires it.

Your rights

You can ask us to access, correct or delete your personal information at any time by emailing [email protected]. If you are in the EU or UK, you can also complain to your local data protection authority.

Where should I put my privacy policy?

Publish it on its own page (for example, /privacy-policy) and link to it from your website footer, sign-up forms, checkout and app store listing. Review it whenever you add a new tool that collects data, such as a new analytics, advertising or chat service.

Other free policy tools

Questions & answers

Yes. It is completely free, with no sign-up, no watermark and no limit on how many policies you create.

Stop answering the same policy questions by hand

ChatMox is a free AI chatbot that learns your policies, products and FAQs, then answers customers on your website 24/7. Live in 15 minutes.