Includes GDPR and CCPA rights sections

Legal Documents for
Your Website in Seconds

Answer a few questions about what your site or app actually does and get a privacy policy, terms of service, cookie policy, disclaimer, refund policy or DMCA policy that says only what you told us. Not legal advice; read it before you publish it.

Your services, named

Pick the services your site or app really uses, such as Stripe, Google Analytics or Firebase Crashlytics, and your privacy policy says who runs each one, what it receives and why, with a link to its own privacy policy.

Generate Free Privacy PolicyView Pricing

Generate Your Legal Documents

Answer a few questions about your business and get legally compliant documents in seconds. No legal expertise required.

1
2
3
4

Your services, named

  • Pick the services your site or app really uses, such as Stripe, Google Analytics or Firebase Crashlytics, and your privacy policy says who runs each one, what it receives and why, with a link to its own privacy policy.
  • Each description comes from that company's own documentation, and a service you did not pick is never mentioned.
  • A service we have no description for is listed by name only and points readers to its own privacy policy, so the document never guesses what it receives.
  • When you pick an advertising service, the policy also says that it may use what it receives for its own purposes.
  • The same list is open to your tools: GET /api/services, the MCP tool list_services and the command legalforge services.

Your store forms, from the same picks

  • For a mobile app, the services you pick also write your Google Play Data safety answers (a CSV the Play Console imports) and a checklist for the App Store privacy label, each row quoting the disclosure the vendor itself published, so the store forms match your policy.
  • They cover only the services you picked, and the data your own app collects you still add yourself.
  • You get the Play CSV only after you have answered the encryption, account and deletion questions, and until then you are told what is missing instead of receiving a form that guesses.
  • Where a vendor says a data type depends on how you use its SDK, such as payment details your app never sees, the row is listed as an only-if row and left out of the CSV.
  • The same answers are open to your tools: POST /api/store-forms, the MCP tool store_forms and the command legalforge store-forms.

Your cookie banner, from the same picks

  • Your cookie banner is built from the same service picks as your policy, so the banner and the cookie policy name the same services in the same categories.
  • In the EU and UK nothing but what the site needs loads until the visitor chooses, Accept all and Reject all are equal buttons, and no box is pre-ticked.
  • For the United States the banner follows the opt-out rule and treats a Global Privacy Control signal as a no.
  • It is one snippet you paste into your page, and the visitor choice stays in their own browser, so a banner view costs you no per-view fee and sends nothing to us.
  • Change your services and the banner and the cookie policy show different references, so you can see which one is out of date.
  • The same banner is open to your tools: POST /api/consent-banner, the MCP tool consent_banner and the command legalforge consent-banner.

A customer asks for your DPA: one click

  • When a customer asks for your Data Processing Agreement, you get a draft built from the same service picks as your policy, with the eight points GDPR Article 28(3) lists, you as processor and a blank for the customer.
  • Every service you picked becomes one sub-processor row restated from the documentation that company published, and a service you did not pick never appears.
  • A hosted copy gives your customer a public sub-processor page with a dated change log that gains a line each time your list changes.
  • The draft is not legal advice and never says it makes you compliant, and it lists the cases where you need a lawyer instead of a template.
  • The same draft is open to your tools: POST /api/dpa, the MCP tool dpa and the command legalforge dpa.

Paste once, stay current

  • Paste one line on any site, or a WordPress shortcode or a Shopify section, and your policy page shows the text stored now, so a law update or an edit reaches it without you pasting again.
  • Each visitor browser keeps the text for 24 hours, so one visitor costs at most one request a day and the embed adds no cookie and no third party script.
  • When the law monitor updates a hosted policy, the email to you names the law and its official source, shows the lines that changed and says what you still have to do.
  • The same embed is open to your tools: the MCP tool embed_snippet and the command legalforge embed, and a hosted copy returns its snippets when you create it.
  • The monitor watches six official sources, not every law, and it does not rewrite a clause to match a new law by itself.

What You Get

What the generator does, and what it does not.

Ready in Seconds

Answer a few questions about your business and get your legal documents instantly. No account to create.

GDPR and CCPA sections

Every privacy policy includes the GDPR rights section for visitors in the European Economic Area; a business in the United States also gets the CCPA section for California residents.

Says only what you do

Cookies, analytics, accounts, payments, children and third-party services each appear in the document only if you said you use them, so it does not claim practices you do not have.

Multiple Formats

Copy it as Markdown, download HTML or a PDF, or link to a hosted copy. The text is yours to put anywhere, including the privacy policy URL field in App Store Connect and Google Play Console.

Six document types

Privacy policy, terms of service, cookie policy, disclaimer, refund and return policy, and DMCA policy. We do not generate a cookie banner or record consent.

Free to Start

Your first Privacy Policy is free with no credit card. We ask for your email address to generate it. Upgrade only if you need the other document types.

Straight Answers Before You Start

What it does

  • Builds the document from your answers, in plain language.
  • Gives you the text to copy, a hosted link and a PDF.
  • Lets you generate the first privacy policy without paying.
  • On Professional and Business, checks the official sources your documents cite every day; when one changes, regenerates your hosted documents and emails you what changed.

What it does not do

  • It is not legal advice and it does not replace a lawyer.
  • It does not scan your site, so you must tell it every service you use.
  • It does not rewrite a clause to match a new law by itself; it tells you what changed so you can review it.
  • It does not provide a cookie banner or record consent.

Frequently Asked Questions

Is the free Privacy Policy really free?
Yes. You can generate a Privacy Policy with no credit card and no account. We do ask for your email address. It includes LegalForge branding at the bottom. Upgrade to remove branding and access more document types.
Are LegalForge documents legally binding?
LegalForge fills in document templates from your answers. We are not a law firm and this is not legal advice. Have a qualified attorney review the document if your situation is unusual, or if you handle sensitive data or children’s data.
Which laws does the privacy policy mention?
The privacy policy includes a GDPR rights section (shown for countries outside the US) and a CCPA section (shown for the US). We do not check your business against any law, and other laws, such as Brazil’s LGPD, are not covered by a dedicated section.
Can I customize the generated documents?
You choose the business name, URL, contact email, country, business type and which data practices apply, including the third-party services you list. You can edit the text afterwards.
Do you update documents when laws change?
On Professional and Business, yes, for your hosted documents: we check the official sources your documents cite (GDPR, CCPA, COPPA, the DMCA and U.S. copyright law) every day. When one changes, we regenerate your hosted documents from our current templates and email you what changed in each. The monitor does not rewrite a clause to match a new law by itself, so read the change. On Free and Starter, a document does not change after it is generated; generate it again if a law or your practices change.
Can I use these documents for multiple websites?
The Free plan covers one website. Starter covers up to 3 sites. Professional covers up to 10 sites. Business plan includes unlimited sites.

Get a Privacy Policy You Can Check

Generate your first privacy policy free, with no credit card. Read it, check it against what you actually do, then publish it.

Generate Your Free Privacy Policy