What a privacy policy must say
What personal data you collect, why, the legal basis (under GDPR), who you share it with (your processors, like hosting, payments and analytics), how long you keep it, where it is stored, and how people can access, correct or delete it. It must match what your product actually does.
App stores, payment processors, ad platforms and many laws require one, so publish it before launch.
Questions
Do I need a privacy policy?
If you collect any personal data, including emails or analytics, almost certainly yes.
Does it cover GDPR and CCPA?
It covers the common requirements of both. Complex cases need legal review.
Is this legal advice?
No. It is a template to start from. Have a lawyer review it, especially if you handle sensitive data or sell in many countries.
Is what I type stored?
No. The document is built in your browser.