You’ve just written an excellent foundation for a privacy policy. It clearly explains most of what data you need and what you’ll use it for - that’s exactly the

You’ve just written an excellent foundation for a privacy policy. It clearly explains most of what data you need and what you’ll use it for - that’s exactly the fundamentals of a good privacy policy. Add some stuff on where/how you store and secure it, when you delete it, and who to contact to update/delete info or complain, and you’re 99% done. I think it’s lazy and bad form to ask for extremely broad catch-all consents to personal data usage, which basically become meaningless as a result. Those remind me of a famous “meme-ified” scene from Parks and Recreation where Ron shows a homemade ‘permit’ to an inspector that says: “I can do whatever I want. /s/ Ron.” At least in the EU there’s the GDPR mandating that consent be specific and freely given. If only data collecting organisations would stop focussing so much on the cookie consent nag screens and take their compliance with the rest of the GDPR equally serious...