Nayan Dhumal
WordPress has a built-in tool that creates a privacy policy page for you, with suggested headings and help text. This guide shows how to use it, what to include for a typical blog and how to link the page so readers can find it. It is a practical guide, not legal advice.
If your blog has a contact form, comments, analytics or affiliate links, you collect or share some information about visitors. A privacy policy explains what you collect and why.
Many ad networks and affiliate programmes also look for a privacy policy when they review a site. It is one of the basic pages every blog should have, alongside About and Contact.
Key takeaways
- WordPress includes a Privacy Settings tool under Settings, then Privacy.
- It can create a draft Privacy Policy page with suggested sections.
- You are responsible for making the content accurate for your site.
- List what you collect: contact forms, comments, analytics, cookies and affiliate links.
- Link the page in your footer so it is easy to find.
- Laws differ by country. Check what applies to you, and take legal advice if unsure.
Not legal advice
I am a blogger, not a lawyer. This guide explains how to create the page in WordPress and what bloggers commonly include. Check the rules that apply where you and your readers live.
Step 1: Open the Privacy settings
- In your dashboard, go to Settings, then Privacy.
- To create a new page, click Create New Page.
- Or, if you already have a page, choose it from the drop-down and click Use This Page.
The WordPress documentation explains that if you create a new page, “template page titled Privacy Policy will be opened. Modify the contents and click Publish.”
Step 2: Use the policy guide
On the same Settings, then Privacy screen, there is a link to WordPress’s privacy policy guide. It suggests what to include and shows text that some plugins add about the data they handle.
WordPress is clear about one thing: the page “will include help and suggestions for your privacy policy. However, it is your responsibility to use those resources correctly, to provide the information that your privacy policy requires, and to keep that information current and accurate.”
Step 3: What to include for a typical blog
- Who you are: your name or site name and how to contact you.
- What you collect: for example, names and emails from your contact form or newsletter signup, and comments.
- Analytics: if you use Google Analytics or a similar tool, say so and explain what it measures.
- Cookies: mention cookies set by your site, analytics or plugins.
- Affiliate links: explain that some links are affiliate links and may use tracking.
- Embedded content: videos or posts embedded from other sites may collect data.
- How long you keep data and why.
- Who you share data with: such as your email marketing service or hosting provider.
- Readers’ rights: how they can ask you to see or delete their data.
Only describe what your site actually does. If you do not run ads, do not copy a section about advertising.
Pro tip
Make a quick list of every plugin and service on your site that touches visitor data, such as your contact form, newsletter tool, analytics, comments and any ad or affiliate tools. Use that list to write the policy, so nothing is missed.
Step 4: Publish and link the page
The WordPress documentation notes that the Privacy Policy page is shown on your login and registration pages, but adds that “it is your responsibility to create a link to the Privacy Policy page to every page on your site.”
The usual place is the footer menu:
- Go to Appearance, then Menus (or the Site Editor for block themes).
- Add your Privacy Policy page to the footer menu.
- Save and check the link on a few pages.
Also link to it near forms. For example, my contact page says the details are only used to reply, and links to the privacy policy. My guide on how to make a contact page in WordPress covers the form itself.
Other legal pages bloggers often add
| Page | Purpose |
|---|---|
| Privacy Policy | What data you collect and how you use it |
| Disclaimer | That your content is information, not professional advice |
| Affiliate Disclosure | That some links earn you a commission |
| Terms and Conditions | Rules for using your site, often for shops and products |
Not every blog needs every page, but a privacy policy and, if you use affiliate links, a clear disclosure are good starting points. My guide on adding affiliate links the right way explains disclosures.
Keep it up to date
Update the policy when you add a new service, such as a newsletter, ads or a new analytics tool. Add a “Last updated” date at the top so readers know how current it is.
Frequently asked questions
Does every blog need a privacy policy?
Most blogs collect some data through forms, comments or analytics, so a privacy policy is good practice. Check the laws that apply to you.
Can I use the WordPress privacy policy template as it is?
It is a starting point. WordPress says it is your responsibility to make the content accurate and current for your site.
Where should I link my privacy policy?
In your footer menu, so it appears on every page, and next to forms that collect personal details.
Do I need a cookie banner?
It depends on where your readers are and what cookies your site uses. Some regions require consent for certain cookies. Check the rules that apply to you.
How often should I update my privacy policy?
Whenever you add or remove a service that handles visitor data, and review it at least once a year.