1. Home
  2. Productivity tools
  3. Privacy Policy Generator

Privacy Policy Generator

For site owners, bloggers and app makers who need a clear privacy policy before they collect data, run analytics or show ads.

Free, no sign-up. Runs in your browser: nothing is uploaded.

How to use Privacy Policy Generator

  1. Fill in the form, or press Sample to see a finished example.
  2. Read the live preview and complete any lines still left blank.
  3. Copy the text or download it as PDF, Word or Markdown.

Features

  • Covers the data you collect, why, and who receives it
  • Cookie, analytics and advertising sections, including wording for Google ad partners
  • GDPR rights for visitors in the EEA and UK, and a California section
  • Children’s privacy, security, retention and policy-change sections
  • Copy the text or download PDF, Word and Markdown

Supported formats

Input

  • Typed details

You get

  • On-screen preview
  • PDF
  • Word (DOCX)
  • Markdown

Private by design

Everything you enter is processed by your browser on this device. Nothing is sent to openWorkstand or anyone else, so the Privacy Policy Generator is safe for private and work data. After you have used it once while online, it also works without an internet connection. How local processing works

Good to know

  • It describes the practices you select; the policy must match what your site actually does.
  • This is a general template, not legal advice. Laws differ by country, state and situation, so have important documents checked by a qualified person.
  • The Word file is a plain, editable document; complex layouts may need a little tidying in Word.

Guide

Writing a privacy policy that matches what your website really does

A privacy policy is a plain statement of what personal information a site collects, why, who else sees it and what visitors can do about it. Small site owners often copy one from another site and end up promising things they do not do, or staying silent about things they do. This generator builds the policy from your own answers instead, so every paragraph exists because you ticked a switch for it.

How the form drives the text

Start with the facts about you: the site name and address, the business or owner name, a privacy contact email and an optional postal address. Then tick the data you collect: names and email addresses, payment details handled by a provider, usage and device data, content that users post, and precise location or other sensitive data. Below that sit the tools you use: analytics with its provider, advertising with its provider, affiliate links, a newsletter service, a payment provider, and embedded video or social posts.

Each switch adds a sentence or a bullet in the matching section, and the list of recipients in the sharing section grows with it. Two switches are about your visitors: one for the EU, EEA and UK, and one for California. Finally you choose the minimum age of your visitors and how long you keep personal data.

What the advertising switch adds

If you show ads, the cookies section gains the wording that third-party vendors, including Google, use cookies to serve ads based on earlier visits to your site or others. It also explains that visitors can opt out of personalised advertising through Google Ads Settings, and points to aboutads.info and optout.networkadvertising.org for opting out of other vendors. Google’s publisher rules ask sites that carry its ads to disclose this kind of cookie use, and the rules change over time, so read the current policy of your ad provider before you publish.

What the visitor-location switches add

Turning on the EU, EEA and UK switch adds a section on the legal bases for using personal information, and a rights section covering access, correction, deletion, restriction, objection, portability and the right to complain to a supervisory authority. Turning on the California switch adds a section on the categories of information collected and the rights of residents, and a sentence on whether you sell or share personal data for cross-context advertising, controlled by its own switch. Leave a switch off when you have no such visitors, so the policy does not make statements that do not apply.

A worked example

Press the first sample, a blog called Maple Notes with ads and analytics. The tool produces a policy dated 10 November 2026 with 14 numbered sections, from “Who we are” to “Contact”, running to roughly 840 words. Section 2 lists contact details and usage and device data. Section 3 names five uses, including showing advertising. Section 4 carries the Google vendor paragraph. The second sample, an online shop, adds payment handling and a payment provider to the sharing section instead. Copy the text, or download it as PDF, Word or Markdown.

Mistakes to avoid

Do not tick a switch you do not mean, and do not leave one off to keep the policy short: an unlisted analytics script is still a script. Check the retention choice against reality, because “as long as needed” is only honest if you delete data when it stops being needed. If children use your site, make sure the minimum age matches your sign-up rules.

Limits

This is a general template, not legal advice. Privacy law depends on where your visitors live and on what your site does, and it covers topics the form cannot, such as data protection officers, detailed international-transfer mechanisms and sector rules for health or finance data. Have a qualified person review the policy if you handle sensitive data or operate at scale.

Checked against the current version of the Privacy Policy Generator on .

Troubleshooting

The download did not start

Look for your browser’s download bar or icon. Some browsers ask once before a site may download files; allow it and click the button again.

Frequently asked questions

Should the policy describe things I might do in future?

Describe what you do today and update the page when that changes. A policy that promises more than you deliver, or hides something you already do, is the version that causes trouble. Re-run the form when you add a tool, a plug-in or a new ad partner.

Where do I put the finished policy on the site?

Publish it on its own page and link it from the footer of every page, from sign-up forms and from the checkout. Ad networks and app stores look for an easy-to-find link, and visitors should reach it in one click.

Do I need a privacy policy for a small website?

Almost certainly yes. If you use analytics, a contact form, a newsletter, comments or ads, you collect personal data, and many laws and ad networks require you to say what you do with it.

Does this replace advice from a lawyer?

No. It gives a solid general draft built from what you tell it. Laws differ by country and business, so have it checked if you handle sensitive data or operate at scale.

Keep working with the result

After you download, choose “Save to Workstand” to keep the result in a folder on your computer, attach it to a project and create a follow-up task. It is saved by your browser, not uploaded.