Contract templates currently German only
Privacy Policy for Website/App
The privacy policy that fits your website — only the building blocks you actually need: cookies, web analytics, social media, newsletter.
This single-page mandatory notice under Art. 13 GDPR informs visitors of your website/app about the processing of their data. The wizard specifically asks which services you actually use — hosting, a cookie-consent tool, web analytics (Google Analytics 4, Matomo or Plausible), font embedding, newsletter, payment service provider and social-media embeds — and inserts the matching paragraph with the correct legal basis for each selected service.
- Law by country
- GDPR-compliant
- No AI training
- PII masking
- Lawyer handover
- Seven languages
What's in this template
Numbers from the actual definition — not marketing slides.
- Clauses
- 26
- Clause variants
- 0
- Wizard fields
- 18
- Quality checks
- 8
- Legal basis citations
- 22
What the contract contains
- Controller and, optionally, a data protection officer
- Hosting & server log files, getting in touch (contact form/email)
- Cookies & consent management — with or without a consent tool
- Web analytics: Google Analytics 4, Matomo or Plausible (multiple selection, each with its own paragraph)
- Font notice (local vs. external — a known cease-and-desist risk in Germany with external Google Fonts embedding)
- Newsletter, payment service provider, social-media embeds, general notice on third-country transfers, data-subject rights
Optional additional clauses
- Newsletter with double opt-in and a delivery service provider
- Payment-service-provider building block for a shop/SaaS product with a payment function
When you need this contract
- Legally securing a new website or app before launch
- Updating an existing privacy policy when new services are added
- Documenting Google Analytics, Matomo or Plausible in a data-protection-compliant way
- Correctly disclosing social-media embeds (Instagram, Facebook, LinkedIn, YouTube)
Who it is for: Website and app operators who need a privacy policy matched to the services they actually use — from a blog to an online shop.
For complex fields such as the scope of services or the purpose, you can request a suggestion via the sparkle button — the suggestion stays editable before it enters the contract.
Once created, you can hand the contract to a suitable lawyer from our network with one click — including full text and metadata.
This notice does not replace a data-processing agreement (DPA) under Art. 28 GDPR — if you use service providers with access to personal data, we additionally recommend our DPA template. For special categories of data, extensive tracking or AI-supported profiling, we recommend legal review.
Our templates are ready-made documents that you adapt to your case. They are not legal advice and do not replace a review by a lawyer; we give no guarantee of correctness, completeness or up-to-dateness. Use is at your own responsibility.
Frequently asked questions
A finished contract in 5 minutes.
Answer a few questions — the wizard does the rest. PDF + DOCX ready to download.
Read on
