Put a privacy policy and cookie banner on your site
Your site collects data through a contact form and analytics, and the privacy policy is either missing or copied from another company with their name still in it.
Tools worth considering
Termly
Generator for privacy policies and cookie notices with a consent banner and script blocker, aimed at small websites that need to be compliant.
Free: 1 basic legal policy, 10,000 banner views/mo, quarterly cookie scans, cookie policy and banner, script auto blocker; Starter $10/mo billed annually ($14 monthly) with 2 policies; Pro+ $15/mo billed annually ($20 monthly) with unlimited policies and banner views, weekly scans, custom banner styling, multi-language and regional consent rules; Agency pricing on request
The problem
Almost every business site collects personal data without thinking of it that way. A contact form takes a name and an email. Analytics sets identifiers. An embedded video or a chat widget loads scripts from another company that do their own tracking. Under GDPR each of those needs a lawful basis and, for non-essential cookies, consent collected before the script runs.
What most small sites have instead is a policy copied from somewhere else, often describing data practices that do not match what the site actually does, and a cookie banner that appears after the tracking has already loaded. Both are worse than nothing in one specific way: they document a claim you are not meeting.
The awkward part is that the honest version keeps changing. Add a chat widget, and your cookie disclosure is out of date the same afternoon.
What AI can actually do here
The generation is templated rather than intelligent, and that is the correct approach for legal text. You answer questions about what your site does and it assembles a policy from clauses that map to those answers. The value is that the output describes your site rather than someone else’s.
The genuinely useful automation is scanning. A scan finds the cookies and scripts your site actually sets, which is reliably more than you remember installing, and keeps the disclosure aligned with reality. Paired with that, a script blocker holds non-essential scripts until the visitor consents, which is the part of the law most banners fail: consent has to come before the tracking, not after.
The limit is worth stating clearly. A generator produces a standard policy for a standard situation. It does not know that you share customer data with a partner, or that you profile users, or that you handle health information. Anything unusual about your data handling is exactly what the template cannot know, and exactly what matters most.
How the tools differ
Termly generates the policies and runs the banner. The free tier covers 1 basic legal policy, 10,000 banner views per month, quarterly cookie scans, a cookie policy and banner, and a script auto blocker, which is enough for a small brochure site. Starter is $10 per month billed annually or $14 monthly with 2 policies. Pro+ is $15 billed annually or $20 monthly with unlimited policies and banner views, weekly scans, custom banner styling, multi-language and regional consent rules.
The upgrade that usually matters is not the policy count, it is the scan frequency and regional rules. Quarterly scanning means a script added in January is undisclosed until spring. Regional rules matter if you have visitors under different regimes, because a single global banner is either over-strict for some or non-compliant for others.
When you don't need a tool
If your site is a static page with no forms, no analytics and no embeds, you may need no banner at all. Consent is required for non-essential cookies, and a site that sets none does not need to ask.
If your data handling is unusual, a generator is the wrong instrument. Sharing data with partners, profiling, automated decisions about people or any special category data means you want a person who does this professionally.
If you are already using a consent platform that came with your website builder, check what it actually blocks before paying for a second one. Many builders include something adequate.
For the customer-facing side of trust rather than the legal side, see get contracts signed without printing.
Get advice for your situation
Your AI consultant
Free · no signup · advice first
An example
Your turn
Or start with a question people ask about this:
By chatting you agree to our terms.
Frequently asked questions
Do I need a cookie banner if I only use analytics?
In the EU, analytics cookies are generally treated as non-essential, so yes, unless you use a genuinely cookieless and privacy-focused setup. Some analytics tools are built specifically to avoid this by not setting identifiers. Check what your specific tool does rather than assuming, because the answer differs by product and configuration.
Is a generated policy legally sufficient?
For a straightforward site that matches the template, it is a considerable improvement on a copied one. It is not advice and it does not cover unusual handling. The test is whether the document describes what you actually do. If it does not, no amount of legal wording helps you.
What is a script blocker and why does it matter?
It stops non-essential scripts from loading until the visitor consents. This matters because consent must come before the tracking. A banner that appears while the tracking already runs collects a click but not valid consent, which is the most common failure on small sites.
How often should I rescan?
Whenever you add anything to the site, and otherwise at least quarterly. The free tier scans quarterly and Pro+ weekly. If you change your site often, the frequency is the reason to upgrade rather than the number of policies.