What a privacy policy must contain
Under Articles 13 and 14 GDPR: who the controller is and how to contact them, what data you process, for what purpose and on what legal basis, how long you keep it, who you share it with, whether it leaves the EU, what rights people have and where they can complain.
Write it like a human
A privacy policy doesn’t have to be unreadable. A table of “when, what, why, how long” is clearer than ten pages of legalese. For inspiration, see this website’s policy.