GDPR For Apps
GDPR For AppsGDPR For Apps
Privacy Policy CreatorCookie Banner CreatorPricingAgencyDocs
Buy Now
Documentation

Documentation

Everything you need to know about GDPR For Apps.

Start generating your policy →

The 8-Step Privacy Wizard

Each step adapts the generated policy to your exact context — no guesswork, no legal jargon.

1

Company Basics

Name, country, contact email, DPO details, EU/UK representative, and target markets.

2

Service Type

Website, mobile app (iOS / Android), or SaaS — adapts the policy structure to your product.

3

Mobile Options

Mobile only

App Store & Google Play URLs, system permissions (camera, location, contacts…). Mobile only.

4

Data Collected

Select data categories (email, device ID, location…) and assign a GDPR legal basis (Art. 6) to each.

5

Third-Party Services

26+ pre-mapped providers with automatic privacy URL, legal name, and App Store Safety Category.

6

Cookie Settings

Declare cookie categories: Necessary, Analytics, Marketing, Functional — used on your site or app.

7

Jurisdictions

Auto-detected from your company country and target markets. Override: GDPR, UK GDPR, CCPA, LGPD, PIPEDA, COPPA.

8

User Rights

Auto-configured based on detected jurisdictions: Art. 15–21 GDPR, CCPA opt-out, LGPD rights, and more.

9

Preview & Export

Live policy preview with validation panel. Download as HTML, Markdown, PDF, or full ZIP bundle.

Automatic Jurisdiction Detection

The engine detects applicable law based on your company country and target markets. No manual selection required — but you can override.

🇪🇺
GDPR
European Union

Applies when your company is based in the EU or you target EU residents. Covers Art. 13 & 14 disclosure, legal bases (Art. 6), DPO requirements, and data subject rights (Art. 15–21).

🇬🇧
UK GDPR
United Kingdom

Post-Brexit equivalent of GDPR. Auto-detected when company is based in the UK or UK is a target market. Requires UK ICO supervisory authority reference.

🇺🇸
CCPA / CPRA
California, USA

Triggered when targeting California residents. Adds “Do Not Sell or Share My Personal Information” section, consumer rights, and opt-out URL.

🇧🇷
LGPD
Brazil

Lei Geral de Proteção de Dados. Applies when targeting Brazilian users. Adds DPA contact, ANPD authority reference, and Brazilian data subject rights.

🇨🇦
PIPEDA
Canada

Personal Information Protection and Electronic Documents Act. Triggered for Canadian users. Adds PIPEDA principles and Privacy Commissioner reference.

🇺🇸
COPPA
USA — Children

Children's Online Privacy Protection Act. Triggered if your service targets children under 13. Adds parental consent requirements and restricted data collection clauses.

What GDPR For Apps covers — and what it doesn't

What's covered

  • Privacy Policy (GDPR Art. 13 & 14 requirements)
  • Data controller identity & contact details
  • DPO/IOD contact (optional field)
  • Purposes & legal bases for processing (Art. 6)
  • Categories of personal data collected
  • Third-party processors & services
  • International data transfers (SCC reference)
  • Data retention periods
  • All GDPR data subject rights (Art. 15–21)
  • Right to withdraw consent
  • Supervisory authority per jurisdiction (PUODO, CNIL, BfDI…)
  • Automated decision-making / profiling clause (optional)
  • CCPA, LGPD, PIPEDA & UK GDPR coverage
  • Cookie Banner HTML (separate builder)

What's NOT covered

  • Data Processing Agreements (DPA) with processors — separate document, requires legal review
  • Records of Processing Activities (RoPA) — Art. 30 GDPR internal register
  • Transfer Impact Assessments (TIA) for data transfers to third countries
  • Data Protection Impact Assessments (DPIA) — required for high-risk processing
  • Legitimate Interest Assessments (LIA) — individual balancing test
  • Standard Contractual Clauses (SCC) — actual SCC documents for international transfers
  • Cookie consent records — audit log of user consents
  • Impressum / legal notice (DE/AT requirement) — separate document
  • Individual legal advice specific to your situation

The generated document includes a visible disclaimer listing what it does not cover. We recommend one-time legal review of your generated template by a qualified data protection lawyer before publishing.

FREE

Cookie Consent Banner — Included Free

Every policy comes with a separate Cookie Banner Builder at no extra cost.

Free Cookie Banner Included
  • Visual drag-and-drop builder — no code required
  • 3 layouts: bottom bar, center modal, corner widget
  • Granular consent categories: Necessary, Analytics, Marketing, Functional
  • Pure HTML + CSS + JS — one snippet, zero dependencies
  • Works on any platform: WordPress, Webflow, Next.js, static HTML
  • Re-open preferences via any link or button

Frequently Asked Questions

Is GDPR For Apps real legal advice?

No. GDPR For Apps generates privacy policy templates based on your inputs. The generated document is a starting point and should be reviewed by a qualified legal professional before publishing.

How do I install my privacy policy on my website?

Download the HTML version and host it at a URL like /privacy-policy on your website. Then link to it from your footer. For WordPress, paste the HTML content into a new page.

What does the license key unlock?

The $59 one-time license removes the watermark from your document and enables PDF export. The license is valid for one domain, forever.

Do I need to create an account?

No account required. Your wizard progress is saved in your browser's localStorage. After purchase, you receive a license key by email to unlock your session.

Which jurisdictions are covered?

The generator auto-detects applicable laws based on your company location and target countries: GDPR (EU), UK GDPR, CCPA/CPRA (California), LGPD (Brazil), PIPEDA (Canada), and COPPA (US children). You can review and override the detected jurisdictions in the Jurisdictions step.

Can I use this for multiple websites?

The standard license covers one domain. You can generate separate policies for each website. Contact us for multi-domain licensing.

Does the cookie scanner guarantee 100% compliance?

No. The cookie scanner provides best-effort detection of known third-party scripts. It does not guarantee 100% coverage — custom scripts, server-side tracking, or newly added services may not be detected. Always verify results manually.

Installation Guides

WordPress

  1. Download your policy as HTML.
  2. Go to Pages → Add New.
  3. Switch to HTML / Code editor.
  4. Paste the HTML content.
  5. Set slug to /privacy-policy
  6. Publish and link in your footer.

Webflow

  1. Download your policy as HTML.
  2. Create a new Static Page.
  3. Add an Embed element.
  4. Paste the HTML into the Embed.
  5. Publish your site.

Next.js

  1. Download as HTML or Markdown.
  2. Place in public/ for static hosting, or
  3. Create app/privacy-policy/page.tsx.
  4. Link to /privacy-policy in footer.

License Key

After purchasing GDPR For Apps Pro, you will receive a license key by email in the format:

GDPR-XXXX-XXXX-XXXX

To activate your license:

  1. Go to the generator page
  2. Complete the wizard steps
  3. On the Preview & Export step, scroll to "Already have a license key?"
  4. Enter your license key and click "Unlock"

Your unlock status is saved in your browser. Clearing localStorage will require re-entering your key.

Documentation

Start generating your policy →

GDPR For Apps generates templates, not legal advice. Consult a qualified legal professional for compliance assurance.

GDPR For Apps
GDPR For Apps

© 2026 GDPR For Apps. Architecting privacy with certainty.

Created by Obsydian.dev

Privacy Policy CreatorCookie Banner CreatorPricingAgencyDocsLegal