Privacy and cookie policies

Overview

The Legal tool generates a privacy policy and a cookie policy for your site. You provide a few details that Promino can’t infer - who you are and how to reach you - and Promino assembles the rest from your live site configuration. The policies are served on your site at /legal/privacy-policy and /legal/cookie-policy.

These policies are a helpful starting point, not legal advice. Have them reviewed by a qualified professional before relying on them.

The details you provide

Open Legal for your site and fill in the Legal details card:

Legal entity name (required) - the person or company that acts as the data controller.
Contact email (required) - where visitors send privacy and legal requests.
Governing country (required) - sets the jurisdiction referenced in your policies.
Registered address (optional) - shown in your policies if you add it.

What Promino fills in automatically

The rest of each policy is built from how your site is actually set up, so it stays accurate without extra work. The Published policies card shows what is being disclosed:

Language - your policies are written in your site’s language.
Google Analytics - disclosed automatically when you have connected a measurement ID.
Forms - the number of forms and how long submissions are kept, including any retention add-on.
Processors - the third-party services Promino uses to run your site.

Publishing your policies

Your policies go live once you have filled in all three required fields and saved. Until then, the pages are not served and the Published policies card shows a Not published badge. After you save, the badge turns to Live and the links become clickable. Editing your details later requires another save to update what visitors see. A Disabled badge appears instead when you have chosen to use your own policies.

Using your own policies instead

If you would rather write your own privacy and cookie pages, turn on Use my own policies instead in the Published policies card. This stops Promino from serving the auto-generated pages, so the /legal/privacy-policy and /legal/cookie-policy URLs are no longer published and the card shows a Disabled badge. You are then free to build and publish your own pages and link to them yourself. Turn the toggle back off at any time to return to the auto-generated policies.

When you connect Google Analytics through Promino, Promino shows a cookie consent banner and only loads analytics after a visitor accepts. If you would rather run your own consent tool - for example one added with custom code - turn on I manage cookie consent myself in the Cookie consent card to switch Promino’s banner off.

This shifts responsibility to you. With the banner off, you must obtain legally compliant consent before any tracking runs, and keep your cookie policy accurate yourself. The auto-generated cookie policy is built only from Promino’s own configuration, so it may not describe a consent tool you have injected. Review it against what your tool actually does, or turn the auto-generated policies off and publish your own.

Linking to your policies

The policy pages are always served at their /legal/ URLs while they are published, even if you don’t link to them. To make them easy to find, add them to your footer in the Layout tool. When you use Generate with AI in Layout, Promino links your published policies in the footer for you.

Keeping them up to date

Because the automatic parts are read from your live configuration, your policies reflect your current setup whenever they are viewed. The Last updated date reflects the last time you changed your legal details.