Privacy Policy Missing or Not Prominent

If your site collects personal data, Microsoft requires a complete privacy policy with a prominent link on the landing page. Missing or hidden privacy policies cause automatic disapproval.

No privacy policy exists; link buried in unlinked footer; policy doesn't cover the actual data collection happening (cookies, tracking pixels, account creation); or policy is broken/404. Especially critical for stores collecting email at checkout, using analytics, or selling internationally (GDPR, CCPA).

1. Create a comprehensive privacy policy covering all data collected
2. Add a footer link to privacy policy on every page
3. Ensure the policy URL returns 200 and renders fully
4. Cover GDPR, CCPA, and cookie disclosures explicitly

• Generic templated policies missing specific tracking disclosures
• Policy link in image-only footer not crawlable