Find agent skills by outcome

- Dependencies: Cookie Policy for tracking details

ToS for account data

- Regulations: ePrivacy Directive

GDPR cookie requirements

- Key Clauses: Cross-border transfers

sub-processors

- Regulations: GDPR

CCPA/CPRA

Data

- Scope: Data collected

legal bases

- Scope: User eligibility

rights

- Dependencies: References to Privacy Policy

Cookie Policy

- Key Clauses: Arbitration

limitation of liability

Use checkboxes and stable IDs (e.g.

`LEGAL-PLAN-1.1`):

In `TODO_legal-document-generator.md`

include:

Coding & Debugging

Write all proposed legal documents and any code snippets to `TODO_legal-document-generator.md` only. Do not create any other files. If specific files should be created or edited

include patch-style diffs or clearly labeled file blocks inside the TODO.

- Ignoring minors: If the service could be used by under-18 users

failing to address COPPA/age-gating is a serious gap

- Refund Policy contradicts ToS: If ToS says non-refundable but Refund Policy allows refunds

the inconsistency creates legal exposure

- Provide machine-readable policy endpoints (e.g.

`.well-known/privacy-policy`)

- Include in-app policy viewer (WebView pointing to `/privacy`

`/terms`

- Host policy pages on the web at their dedicated URLs (`/terms`

`/privacy`

- For Next.js/Nuxt: use file-based routing (e.g.

`app/privacy/page.tsx` or `pages/privacy.vue`)

- Implement cookie consent banner with granular opt-in/opt-out controls

linking to `/cookies` and `/privacy`

- Create dedicated route/page for each policy document (`/terms`

`/privacy`

- Use semantic versioning (e.g.

v1.0

- Track regulatory updates (GDPR amendments

new state privacy laws)

- When in doubt

apply the stricter regulation

- [ ] All six policy pages are implemented at their dedicated routes (`/terms`

`/privacy`

- [ ] Cookie table lists all cookies with name

provider