Privacy policy generator for small business websites
Answer a few questions and get a privacy policy in plain language, with the clauses your customers, Google Ads, Meta and the app stores expect. Written for businesses in the United States and El Salvador. Everything happens in your browser: nothing is sent to us.
- No sign-up
- Copy or download as HTML
- US and El Salvador
- Updates as you type
Answer and the policy writes itself
2 minutesYour privacy policy
Updates as you typeThis is a template, not legal advice. It covers what most small business websites need. If you handle health, financial or children's data, sell to the European Union, or operate in a regulated sector, have a lawyer review it.
Four reasons your website needs a privacy policy
Google Ads and Analytics require it
Google's terms oblige you to disclose the use of cookies and analytics. Ads with a landing page that has no privacy policy get disapproved.
So do Meta and the app stores
The Facebook pixel, any login with Meta, and every app on the App Store or Google Play, even free ones with no accounts.
Customers look for it
Before typing their phone number in a form or opening a WhatsApp chat, many check what you will do with their data.
The law requires it
In the United States, California's CCPA/CPRA and CalOPPA, CAN-SPAM for marketing emails and COPPA for children under 13. In El Salvador, the 2024 Personal Data Protection Law gives people the rights of access, rectification, cancellation, opposition and portability.
The six sections of the generated policy
Who is responsible
And how to contact them to exercise rights.
Which data is collected
Split between what you give and what browsing generates.
Purposes and legal basis
Consent, contract or legal obligation.
Providers and transfers
Named, and whether they are abroad.
Cookies, retention and security
Plus children and changes to the policy.
Rights by country
CCPA, CAN-SPAM and COPPA in the US; ARCO and portability in El Salvador.
From template to live page in four steps
Want to know whether your home page already has a form, WhatsApp and analytics measured correctly? Run the free website checker.
Copy the text or download the HTML
The "Copy text" button keeps headings and lists when pasting into WordPress or Google Docs.
1 minuteCreate a page called "Privacy Policy"
WordPress: Pages → Add New. Shopify: Settings → Policies. Wix: Pages → New page.
5 minutesLink it from the footer and next to every form
Google Ads reviewers look for that link on the landing page.
5 minutesSet the date and review it whenever you add a tool
A new pixel, a CRM, a chatbot: each one touches data and must appear in the provider list.
Frequently asked questions
If yours is not here, write to us and we answer the same business day.
Is the generated policy valid in Texas?
Texas has its own Data Privacy and Security Act (2024) that applies to larger businesses processing data of Texas residents; small businesses as defined by the SBA are mostly exempt except for sensitive data. The generated text covers the disclosures customers and ad platforms expect. If you approach those thresholds, get legal review.
Do I need a cookie banner too?
In the United States, generally no for a small business site with analytics only; disclose it in the policy. If you sell to visitors in the European Union or the United Kingdom, you need consent before loading analytics or marketing tags.
Does this work for an app?
Yes. Replace "website" with the app name in the text and add the permissions the app requests (camera, location, contacts). The app stores accept a policy hosted on your website.
Do you keep what I type?
No. The generator runs entirely in your browser. Nothing is sent to our server.
What about terms and conditions?
They are a different document that sets the rules of the sale or service. If you sell online you need both. We can draft the terms with your quote when we build the store.
Need the whole site compliant and converting?
We build websites and online stores for businesses in Houston and El Salvador with the legal pages, tracking and contact channels done right from day one.
