Back to FXF

Policies & cookie consent, minus the pain

Check the services your site uses and get a privacy policy, a cookie table, and an embeddable consent banner — free, because nobody should pay to write this stuff.

Determines which legal sections the policy includes.

Check everything that runs on your site — this drives the policy, the cookie table, and the banner categories.

Strictly necessary

process payments and prevent fraud

process payments as merchant of record · no cookies

process payments as merchant of record · no cookies

host the site; optional cookieless analytics and speed insights · no cookies

monitor errors and keep the service running · no cookies

content delivery and bot/security protection

database and authentication infrastructure

backend database and authentication infrastructure · no cookies

authentication and session management

send transactional email (receipts, sign-in links, notifications) · no cookies

send transactional email (receipts, sign-in links, notifications) · no cookies

power AI features in the product · no cookies

Functional

provide in-app customer support chat

provide customer support chat

Analytics

measure site usage and performance

cookieless usage analytics · no cookies

product analytics and feature measurement

product analytics

route event data to connected tools

understand how the site is used via heatmaps and recordings

Advertising & marketing

measure and target advertising on Meta platforms

measure and target advertising on LinkedIn

measure and target advertising on TikTok

send marketing email you subscribed to

Anything not in the list — your own tracking or a niche tool.

Opt-in blocks optional cookies until accepted (EU-style). Opt-out loads them but offers a clear reject (US-style).

Generated policy

Privacy policy

[Company name] — last updated October 25, 2026

Who we are

[Company name] ("we", "us") operates [your website]. We are based in [country] and are the data controller for the personal data described in this policy. You can reach us at [contact email].

What we collect and why

We collect only what we need to run the service. Depending on how you use it, that can include:

  • Information you give us directly, such as your name and email address when you create an account, contact us, or subscribe to updates.
  • Technical data sent automatically by your browser, such as your IP address, device and browser type, and pages you visit.

Legal bases for processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

  • Contract — to provide the service you signed up for, including processing payments and keeping your account working.
  • Consent — for optional cookies and similar technologies (analytics, advertising). You can withdraw consent at any time via the cookie settings on the site, without affecting what was processed before.
  • Legitimate interests — to secure, maintain, and improve the service (for example error monitoring and fraud prevention), balanced against your rights.
  • Legal obligation — where we must keep or disclose records, such as tax and accounting rules.

Cookies and tracking

Cookies are small files stored on your device. [Company name] uses strictly necessary cookies to make the site work, and asks for your consent before setting optional ones. You can change or withdraw your choices at any time from the cookie settings on [your website].

The services we use do not set optional cookies on your device.

Who we share data with

We do not share your personal data with third-party service providers beyond what is needed to operate the site.

International transfers

Some of our service providers are located outside [country]. Where personal data is transferred internationally, we rely on recognized safeguards:

  • adequacy decisions or standard contractual clauses

How long we keep data

We keep personal data only for as long as needed for the purposes above: account data while your account is active, support and billing records as required by law, and analytics data for a limited period before it is deleted or anonymized. You can ask us to delete your data at any time.

Your rights (GDPR)

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data.
  • Receive a copy of your data in a portable format.
  • Restrict or object to certain processing.
  • Withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email [contact email]. You also have the right to lodge a complaint with your local data protection authority.

Children's privacy

Our service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy when our practices or the law change. We will post the new version here with an updated date and, where required, ask for your consent again.

Contact us

Questions about this policy or your data? Email [contact email].

Host it & get the banner
Free FXF account keeps your policy hosted and always in sync, and unlocks the embeddable consent banner with consent records.

Generated starting point, not legal advice — have counsel review before shipping.