Privacy Policy Checklist Generator
100% PrivateSecurity & Privacy UtilitiesTurn a short questionnaire about your website into a data-practices checklist.
Runs entirely in your browser. Your input is not uploaded to Ovatly or anywhere else.
This is a planning checklist only. It is not a privacy policy and it is not legal advice. Have your finished policy reviewed by a qualified lawyer for the places where your visitors live.
- 1Who operates the site. State the legal name of the operator, a contact email and a postal address where users can reach you about privacy.
- 2What you collect and why. List each kind of personal data, what it is used for and the legal basis you rely on (contract, consent, legitimate interest).
- 3How long you keep data. Give a retention period or the rule you use to decide it, for every category you collect.
- 4Security measures. Describe in plain language how data is protected in transit and at rest, without publishing details that would help an attacker.
- 5User rights. Explain how visitors can request access, correction, export or deletion of their data, and how to complain to a regulator.
- 6Policy changes. Say how you will announce changes and keep older versions available or dated.
- 7Contact forms and email. State that form messages are stored in an inbox or helpdesk, who can read them and when they are deleted.
- 8Analytics. Name the analytics provider, what it measures, whether IP addresses are collected, and how visitors can opt out.
- 9Cookies and similar storage. List cookie categories, purposes and lifetimes, and describe the consent banner and preferences control.
- 10Third parties and transfers. Name every processor or service that receives data (hosting, email, analytics, payments) and the countries data may be transferred to.
- 1Tick everything your site does: accounts, analytics, payments, uploads, and so on.
- 2Read the checklist that builds below; the baseline topics are always included.
- 3Copy or download it and use it as the outline when you draft, or hand it to your lawyer.
- 4Re-run it whenever you add a feature that touches personal data.
Ticking Contact forms, Analytics and Cookies produces a 10-topic checklist: the six baseline topics (operator identity, what you collect and why, retention, security, user rights, policy changes), plus contact forms and email, analytics, cookies and similar storage, and the closing third parties and transfers topic. Each item carries a plain-language note on what the section must explain.
- This is a planning checklist, not a privacy policy and not legal advice; the tool says so on the page and in the download, and a qualified lawyer should review your finished policy.
- The checklist reflects common requirements in regimes like the GDPR and CCPA at a topic level; your obligations depend on where you and your visitors are, which the tool does not ask and cannot judge.
- If you tick nothing, you still get the baseline topics, because even a site that collects almost nothing has an operator, server logs and user rights to describe.
- Your answers stay on this device; nothing about your site is sent anywhere.
No. It is an outline of topics, written to guide drafting. Publishing it as a policy would mislead your visitors and likely fail legal requirements.
About this tool
The Privacy Policy Checklist Generator turns a short questionnaire about what your website does into a topic checklist for your privacy policy: the subjects it needs to cover and what each section should explain. It writes no policy text for you, because an honest policy has to describe your actual practices, not a template's guesses.
Related tools
Part of Ovatly's free tools in Security & Privacy Utilities.