Privacy policy
Draft template · not ready for public release.
Operator and contact
[REQUIRED BEFORE LAUNCH: legal operator name, business address, privacy contact, and jurisdiction.] This is a drafting template, not a completed legal notice.
Data and purposes
Document account data, saved URLs, security events, and aggregate click information. State the specific legal basis for each purpose, categories of processors, and any international transfers.
Analytics and retention
Country and device estimates are not exact identities. Select a justified retention period for raw events, pseudonymous daily estimates, aggregate reports, backups, and security logs. A hash or pseudonym can still be personal data.
Your choices and rights
Describe applicable access, correction, erasure, portability, restriction, objection, consent withdrawal, and complaint rights. Add the appropriate supervisory authority and a working request contact.
Cookies and service providers
List actual session/security cookies and optional tracking technologies. Complete the ePrivacy/consent assessment before deployment. Do not claim that cookie-free automatically means consent-free.