Can AI write a privacy policy for my website?
Half. AI drafts a readable first version from what your site actually does. Legal requirements vary, so it needs a check before you rely on it.
01Why half-bot
- It's good at plain-language drafts that match your real data practices.
- It can't know every law that applies to your customers.
- A policy that describes things you don't do is worse than a short honest one.
Sponsor slot · openFeatured tool for this task. A labeled card for one relevant tool.
Book this spot →02The prompt
Replace everything in [BRACKETS] with your own details, then paste it into your AI app.
Draft a plain-English privacy policy for my small business website. This is a draft for review, not legal advice. Business name and location: [NAME, STATE/COUNTRY] What data I collect and how: [e.g. email for newsletter, payments through a processor] Services that handle data for me: [e.g. email provider, payment processor, web host] Do I use cookies or analytics? [YES/NO, WHICH] Contact email for privacy requests: [EMAIL] Write sections: what we collect, how we use it, who we share it with, cookies, your choices, contact, changes. Rules: describe ONLY what I listed. Mark anything uncertain as [CHECK].
03Steps
- List exactly what your site collects.
- Resolve every [CHECK] item.
- Have it reviewed if you sell to people in regions with strict privacy laws.
04What can go wrong
- Requirements differ by country and state.
05What to use
Any major AI chat app: ChatGPT, Claude or Gemini. The free tier works.
06Our test runs
2 runs, each with a different made-up sample. 2 of 2 passed every check.
Run 1 · Llama 3.3 70B · graded by GPT-OSS 120BSep 30, 2026Passed
The made-up sample:
[NAME, STATE/COUNTRY]Sunnydale Crafts, Oregon, USA[e.g. email for newsletter, payments through a processor]Email address for newsletter; name, shipping address, and phone number for order fulfillment; payment details (card number, expiration, CVC) processed via Stripe; IP address for security and fraud prevention.[e.g. email provider, payment processor, web host]Mailchimp for email newsletters; Stripe for payment processing; Amazon Web Services (AWS) for web hosting; Google Analytics for site analytics.[YES/NO, WHICH]YES, we use essential session cookies and Google Analytics tracking cookies.[EMAIL]privacy@sunnydalecrafts.com[CHECK]None
- Include required sections
- Describe only listed items
- Mark uncertainties as None
- Plain‑English draft, not legal advice
- Didn't make up details we never gave it
What came back (excerpt):
ormation with the following services: - Mailchimp: for email newsletter management - Stripe: for payment processing - Amazon Web Services (AWS): for web hosting - Google Analytics: for site analytics None other than these specified services.
Read the full answer
**Sunnydale Crafts Privacy Policy** ### What We Collect We collect the following information from you: - Email address: for newsletter subscription - Name, shipping address, and phone number: for order fulfillment - Payment details (card number, expiration, CVC): processed through Stripe for payment purposes - IP address: for security and fraud prevention ### How We Use It We use the collected information for the following purposes: - Email address: to send newsletters - Name, shipping address, and phone number: to fulfill orders - Payment details: to process payments through Stripe - IP address: for security and fraud prevention ### Who We Share It With We share your information with the following services: - Mailchimp: for email newsletter management - Stripe: for payment processing - Amazon Web Services (AWS): for web hosting - Google Analytics: for site analytics None other than these specified services. ### Cookies We use cookies on our website, including: - Essential session cookies: necessary for the website's operation - Google Analytics tracking cookies: to analyze site usage ### Your Choices You have the following choices regarding your data: - Subscribe or unsubscribe from our newsletter - Provide or withhold personal data for order fulfillment, understanding that withholding necessary data may prevent us from fulfilling orders - None other than these specified choices. ### Contact For any privacy-related requests or questions, please contact us at: privacy@sunnydalecrafts.com ### Changes We reserve the right to make changes to this privacy policy. Changes will be reflected on this page, and we encourage you to review the policy periodically for updates. None other than updating this page will be used to notify users of changes.
Check that no extra data beyond the listed items is added.
Run 2 · Llama 3.3 70B · graded by GPT-OSS 120BOct 20, 2026Passed
The made-up sample (a messier one):
[NAME, STATE/COUNTRY]Sunnybrook Crafts LLC, Portland, Oregon, USA[e.g. email for newsletter, payments through a processor]Email address for newsletter sign‑up, name and shipping address for order delivery, phone number (optional) for support, payment card details processed via Stripe, and occasional survey responses.[e.g. email provider, payment processor, web host]Mailchimp (email newsletters), Stripe (payment processing), Shopify (online store platform), Amazon Web Services (web hosting), Google Analytics (traffic analysis).[YES/NO, WHICH]YES, we use first‑party session cookies and Google Analytics cookies for performance and usage statistics.[EMAIL]privacy@sunnybrookcrafts.com[CHECK]Confirm whether we need a GDPR notice for EU visitors and whether we should list a data‑retention schedule.
- Include required sections (what we collect, how we use it, who we share it with, cookies, your choices, contact, changes)
- Describe ONLY the data and services the user listed
- Mark uncertain items with the required confirmation note
- Present as a plain‑English draft, not legal advice
- Didn't make up details we never gave it
What came back (excerpt):
mance and usage statistics ### Your Choices You have the following choices regarding your data: * You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in the email or contacting us at privacy@sunnybrookcrafts.
Read the full answer
**Sunnybrook Crafts LLC Privacy Policy** ### What We Collect We collect the following information from you: * Email address when you sign up for our newsletter * Name and shipping address when you place an order for delivery * Phone number (optional) when you contact us for support * Payment card details, which are processed securely through Stripe * Occasional survey responses, which help us improve our services ### How We Use It We use the collected information to: * Send you newsletters and updates about our products and services * Deliver your orders to the specified shipping address * Provide support and respond to your inquiries * Process payments for your orders * Analyze survey responses to improve our offerings ### Who We Share It With We share your information with the following services that help us operate our business: * Mailchimp (for email newsletters) * Stripe (for payment processing) * Shopify (for online store platform) * Amazon Web Services (for web hosting) * Google Analytics (for traffic analysis and performance statistics) ### Cookies We use cookies on our website, including: * First-party session cookies to facilitate your browsing experience * Google Analytics cookies to collect performance and usage statistics ### Your Choices You have the following choices regarding your data: * You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in the email or contacting us at privacy@sunnybrookcrafts.com * You can choose not to provide optional information, such as your phone number * You can adjust your browser settings to refuse or limit cookies ### Contact If you have any questions or concerns about our privacy policy or would like to request access to, correction of, or deletion of your personal data, please contact us at: privacy@sunnybrookcrafts.com ### Changes We may update this privacy policy from time to time. We will post the updated policy on our website and notify you of significant changes. **Note:** Confirm whether we need a GDPR notice for EU visitors and whether we should list a data-retention schedule.
Ensure the policy stays limited to the user‑provided data and services.
How each run works: we fill the prompt with a made-up sample, run it once in Llama 3.3 70B, and GPT-OSS 120B grades the answer against the prompt's own rules. Word limits are counted by code, and every quote flagged as made up is checked against the full answer. Your results can differ. How we test.
Prompt packPolicies & Operations 10 step-by-step prompts that go further than this one, $15.
See what’s inside →