privacy-policy

privacy-policy is a skill for Claude Code from phuryn/pm-skills. It costs 42 tokens per session (2,307 once invoked), scanned A, original, MIT.

A drafting guide for a privacy policy, the document that explains what personal data a product collects, uses, and shares and what rights users have. It covers jurisdictions, GDPR considerations, and sections that need legal review.

In plain words
What is it for?
Use it to create or update privacy documentation for a digital product or service and prepare for compliance work.
Why use it?
It gives a product team a structured way to document data practices and compliance questions. A qualified privacy lawyer still needs to review the final policy.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the pm-toolkit plugin — 4 skills, 5 commands shipped together

Good fit Use it to create or update privacy documentation for a digital product or service and prepare for compliance work.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/phuryn/pm-skills/privacy-policy
About the project

phuryn/pm-skills is a marketplace of reusable skills, commands, and plugins that guide AI assistants through product-management work such as discovery, strategy, planning, metrics, launches, and growth. It is for product managers and teams using Claude Code, Cowork, or compatible assistants. The catalogue entries are the project's own workflows and extensions.

phuryn/pm-skills · 27,091 stars · on GitHub · productcompass.pm

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add phuryn/pm-skills --skill privacy-policy
Clone the repo
git clone --depth 1 https://github.com/phuryn/pm-skills

Made for: Claude Code.

Or install pm-toolkit, the plugin that ships this one along with the rest of its 4 skills, 5 commands.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for privacy-policy

README.md
[![agentmods](https://agentmods.dev/badge/skills/phuryn/pm-skills/privacy-policy/github.svg)](https://agentmods.dev/skills/phuryn/pm-skills/privacy-policy)
Your own site
<a href="https://agentmods.dev/skills/phuryn/pm-skills/privacy-policy"><img src="https://agentmods.dev/badge/skills/phuryn/pm-skills/privacy-policy/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for privacy-policy

Your own site · 80×15
<a href="https://agentmods.dev/skills/phuryn/pm-skills/privacy-policy"><img src="https://agentmods.dev/badge/skills/phuryn/pm-skills/privacy-policy.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 42 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,307 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Socket pass 15 Sept 2026
  • Snyk warn 15 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00042 $0.02307
Opus 5.5 $0.00017 $0.00923
Sonnet 5.5 $0.00008 $0.00461
Haiku 4.5 $0.00004 $0.00231

Measured 1mo ago against content hash 4388e746dbde, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

privacy-policy scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

3 near-identical copies found in the catalogue:

pm-toolkit/skills/privacy-policy/SKILL.md · 239 lines

How it starts

The opening of the file, as written. The whole thing — 239 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Privacy Policy Generator

You are an experienced data privacy and compliance specialist. Your role is to help draft comprehensive, clear, and compliant privacy policies for digital products and services.

Purpose

Draft a detailed privacy policy for a product or service. The policy covers data types handled, applicable jurisdiction, and clearly marks clauses that require legal review. Provide plain-language explanations to ensure accessibility and transparency.

Important Disclaimer

This is for informational purposes only and does not constitute legal advice. Always have a qualified attorney specializing in data privacy law review the final policy before publication. Privacy policies are legally binding documents that establish your company's responsibilities and users' rights; professional legal review is essential.

Input Arguments

  • $PRODUCT_NAME: Name of the product or service
  • $PRODUCT_URL: URL or description of the product (optional; will be researched if provided)
  • $COMPANY_NAME: Legal name of your company
  • $COMPANY_ADDRESS: Company headquarters or registered address
  • $CONTACT_EMAIL: Email for privacy inquiries (e.g., [email protected])
  • $INFORMATION_TYPES: Types of data collected (e.g., "names, emails, usage behavior, location data, payment information, device identifiers")
  • $JURISDICTION: Applicable jurisdiction (e.g., "United States," "European Union (GDPR)," "California (CCPA)")

Process

Step 1: Research (if URL provided)

If $PRODUCT_URL is provided:

  • Visit the product website
  • Identify what data is collected (forms, tracking, login, payments)
  • Note any third-party integrations (analytics, payment processors, SDKs)
  • Understand the product's primary features and use cases

Step 2: Clarify Data Collection

Map out all data your product collects:

  • Direct collection: What users enter (name, email, preferences)
  • Automatic collection: What is tracked (IP address, usage behavior, device info, cookies)
  • Third-party data: What comes from partners, integrations, or service providers
  • Special categories: Does the product handle health data, financial data, children's data, biometric data?

Read the full file on GitHub · 239 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 239 lines · 42 tokens per session scan A 4388e746dbde

Subscribe to this mod's changes

privacy-policy is a skill published in the GitHub repository phuryn/pm-skills (27,091 stars, last pushed yesterday), licensed MIT. It adds 42 tokens to every session and 2,307 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-15.

Related

Other skills, from other repositories

privacy-policy

Draft a jurisdiction-aware privacy policy for any digital product — use this skill whenever a PMM or Product Manager needs to create, update, audit, or review data protection documentation, asks about GDPR, CCPA, or UK GDPR obligations, mentions "privacy policy", "cookie policy", "data retention", "right to be…

stefanoskarakasis/Product-Marketing-Skills · 87 tokens

pmm-resume

Resume reviewer and tailoring engine for Product Marketing Managers (IC to VP, including AI PMM roles). Takes baseline resume + job description → dissects JD → ranks bullets by impact fit → rebuilds complete resume in one pass. Trigger on: resume + JD paste, "tailor this", "which bullets for this role", "rebuild for…

stefanoskarakasis/Product-Marketing-Skills · 103 tokens

product-marketing-context

Build and maintain the shared GTM brain — product context, ICP, positioning, voice, market context, proof points, plus optional strategy and execution, and the deal-reality fields (objections, switching forces, customer language, anti-persona) — that every other skill in this stack reads before producing output. Works…

stefanoskarakasis/Product-Marketing-Skills · 154 tokens

workflow-orchestrator

Orchestrates multi-skill PMM programs end-to-end — chains positioning, competitive, GTM strategy, campaign briefs, stakeholder maps, and retros into one coherent program with a master document and brain updates. Trigger on: "run full GTM workflow", "run a full launch", "launch [product] end to end", "positioning…

stefanoskarakasis/Product-Marketing-Skills · 117 tokens

positioning-messaging

Builds or audits positioning statements, messaging hierarchies, homepage copy, and persona cards using April Dunford's Obviously Awesome framework across five modes (build, audit, fletch, sales-enablement, homepage). Refuses to generate without a named primary persona and 3+ alternatives including status quo, and…

stefanoskarakasis/Product-Marketing-Skills · 79 tokens

writing-assistant

Rewrites, sharpens and drafts B2B writing in the writer's real voice: Slack messages, emails, memos, PRDs, decks, plus marketing content (blog posts, landing pages, press releases, case studies, newsletters, social posts). Use whenever someone wants to rewrite, tighten, draft or audit copy, asks why copy isn't landing…

stefanoskarakasis/Product-Marketing-Skills · 117 tokens