OneTaskBy Tim King · Updated
Free Privacy Policy Generator
Plain-English Privacy Policy for a Small Site, With GDPR and CCPA Sections
OneTask is free, with no sign-up, and built by one person.
If this tool saved you time, a coffee helps keep new ones coming.
How the Privacy Policy Generator works
This privacy policy generator writes a clear policy for a small website, blog or online shop. Choose the analytics, advertising, newsletter and payment services you use and the privacy law that applies, and it builds a policy that names each provider and explains visitors' rights in plain English.
How the privacy policy generator builds your policy
A privacy policy has to describe what you actually do. A generic template that mentions services you do not use, or leaves out ones you do, is a common reason regulators and ad networks reject a site. This tool includes only the sections your choices need and names the providers you picked.
Every policy covers what you collect, why, cookies, who you share data with, how long you keep it, your visitors' rights and how to contact you. Choosing GDPR or UK GDPR adds the legal bases, international transfers and the right to complain to a regulator such as the ICO. Choosing California adds the right to know and delete, the sale and sharing wording, and Global Privacy Control.
Leave a field blank and a placeholder in square brackets marks it for you to fill in. The policy is written in your browser and nothing is stored. It is a template, not legal advice, so check it against what your site really does before you publish it.
FAQ
Do I need a privacy policy?
If your site collects any personal data, including analytics, contact forms or a newsletter, most privacy laws require one. Google AdSense, app stores and payment providers also require a policy.
Does this cover cookies?
Yes, a cookie section lists the kinds of cookies your choices imply. Under GDPR it says non-essential cookies are set only after consent, so make sure your banner really works that way before publishing.
My service is not in the list. What do I do?
Choose the closest option, then edit the name in the generated text. Add a line for each extra service that receives visitor data, such as a chat widget, form builder or embedded video player.
Is this policy legally binding?
It is a starting point, not legal advice. For a larger business, sensitive data or children's data, have a lawyer review the policy, since the rules for those cases go well beyond a small-site template.
See also: all Security & Identifiers tools, Dev Utilities, Formatters & Validators, Data & Encoding, SEO, Accessibility, AI.
Related tools
Cookie Consent Checker
Find analytics and ad cookies set before visitors give consent.
Password Policy Generator
Write a modern NIST-based password policy for your organisation.
Cookie Parser
Break Set-Cookie and Cookie headers into readable attributes with warnings.
Data Breach Notification Deadline Calculator
Work out the exact deadlines to report a data breach.
.env File Checker
Lint a .env file for syntax errors, duplicates and weak secrets.