Privacy policy generator

Answer a few questions and get a privacy policy as PDF, plain text, Markdown or an HTML fragment. Built from a checked template, not from AI.

How to Download the policy

1
Answer a few questions about your site
Your company name, contact email, what data you collect and which third-party services you use.
2
Pick your jurisdiction
GDPR, UK, CCPA, PIPEDA, the Australian Privacy Principles or a general wording. The rights section and the legal basis section change with it.
3
Download the policy
Take it as a PDF to file, as plain text or Markdown to edit, or as an HTML fragment you can paste straight into your own page.

A template you can read, not a paragraph invented on the spot

The policy is fourteen numbered blocks written once and reviewed once, with your answers substituted into them. No model is called anywhere on this page. That matters for a legal document more than it does for a blog post: the same answers always produce the same text, so you can diff two versions and see exactly what changed, and nobody has to wonder whether a sentence about data transfers was invented this morning. It is also why the result appears instantly and costs nothing to produce.

Blocks appear because your answers call for them

Nothing generic is padded in. The cookies section only appears if you say you use cookies or analytics. The third-party section only appears if you name a provider, and it brings the data-sharing and transfers section with it. Saying you take payments adds a paragraph about the payment provider handling card details. Collecting location or file uploads adds a paragraph about where that data comes from. Everything that is included is numbered continuously, so the finished document never has a gap in its numbering where a block was left out.

What changes between GDPR, CCPA and the rest

Under GDPR and the UK regime the policy adds a legal basis section naming consent, contract, legitimate interest and legal obligation, and a rights section listing all six data subject rights including the right to complain to a supervisory authority. Under CCPA the rights section instead covers the right to know, to a copy, to deletion and to opt out of sale and sharing, with the Do Not Sell or Share My Personal Information wording. PIPEDA points at the Privacy Commissioner of Canada, the Australian option at the Australian Privacy Principles, and the general wording covers access, correction and deletion without naming a regulator.

No model call and no server request

Your company name, contact email and every answer stay in the browser tab, and the policy is assembled there. Nothing is uploaded and no model is queried. A draft of the form is kept in this browser under pulsarkit.draft.privacy-policy for thirty days so you do not lose your answers, and one button clears it.

Frequently asked questions

Does this use AI to write the policy?

No, and that is the point. The text comes from a fixed template with your answers substituted into it, so the same answers always give the same document. A generated policy differs each time it is produced, cannot be diffed against last month's version and costs money and seconds to produce. This one is instant, free and repeatable.

Is the result GDPR and CCPA compliant?

It carries the sections those regimes expect: legal basis and the six data subject rights for GDPR and the UK, the right to opt out of sale and sharing for CCPA. Whether your business is compliant depends on what you actually do with data, not on the wording of a page, so treat this as the document you take to a review, not as the review itself.

Can I paste the text into my own site?

Yes. Choose the HTML output and you get a fragment with no html or body wrapper, with fk-policy__h2 and fk-policy__p classes on the headings and paragraphs, so it inherits your own styling. Markdown and plain text are there too if your site builds pages from those.

How much does this cost?

Nothing, and there is no signup. The whole document is assembled by JavaScript in your browser, so there is no per-document cost to pass on to you.

Does my company information go to a server?

No. The company name, website, contact email and every checkbox stay in the tab. The PDF, text, Markdown and HTML outputs are all produced locally and handed straight to your download.

Does this replace a lawyer?

No, and the document says so on its first line. It is a template built from common practice, not advice about your business or your jurisdiction. Have it reviewed by a qualified lawyer before you publish it.

How do I update the policy when things change?

Come back, change the answers and download again. Because the output is deterministic, the only differences between the old file and the new one are the parts you actually changed, which makes the update easy to review and easy to explain to your users.

What retention period should I put?

Twenty-four months is a common default for a website and it is what this page starts with. Pick the shortest period that still lets you run the service and meet your accounting obligations; anything from one to a hundred and twenty months is available.