Skip to content

Guide

The Support URL and Privacy Policy URL for your app, what the pages need and where to host them free

App Store Connect asks every app for a Support URL and a Privacy Policy URL. If you have no website, you have nothing to put in them. This guide says what each field needs, what a working page for each holds, and the free ways to host them. The Apple wording below was read on 12 November 2026. Apple changes these pages, so check the links before you submit.

What the Support URL needs

Apple's page for version information says the Support URL “must lead to actual contact information (legal address, email address, telephone number), as may be required by local law, so that users can reach you regarding app issues, general feedback, and feature enhancement requests.” It also says the property “is required and can be localized”. Apple asks for the entire URL, including the protocol, such as https://.

App Review Guideline 1.5 adds that your app and its Support URL should each include “an easy way to contact you”.

A support page that fits this holds:

  1. The app's name and one line on what it does.
  2. A way to reach you, such as an email address you read, though local law may ask for more than an email. Apple lists a legal address and a telephone number as examples of contact details.
  3. A short list of the questions people ask most, if you have any.

The Marketing URL field is separate. Apple describes it as the site “where users get more information about the app”, and the page does not mark it as required.

What the Privacy Policy URL needs

Guideline 5.1.1(i) says: “All apps must include a link to their privacy policy in the App Store Connect metadata field and within the app in an easily accessible manner.” So the link goes in two places, the App Store Connect field and a screen in your app.

In App Store Connect, open your app, choose App Privacy in the sidebar, and click Edit next to Privacy Policy. Apple's page on app privacy says “A privacy policy URL is required for all apps”. Apple's App Store Connect Help lists the field on its App information page.

The same guideline says the policy must clearly and explicitly:

  1. Identify what data the app or service collects, how it collects that data, and all uses of that data.
  2. Confirm that any third party that receives data from your app (analytics tools, ad networks, SDKs and others) gives the same or equal protection as the policy describes.
  3. Explain your data retention and deletion policies, and how a user can revoke consent or request deletion of their data.

The page has to match what your app does. If you add an analytics tool or a sign-in later, the page changes in the same release. This guide does not write your policy and is not legal advice. A policy generator or a lawyer can draft the text. Your job is to keep the page true.

Free ways to host the two pages

Both pages are plain text and a few links, so a static page is enough. Common free options are:

  • GitHub Pages, from a public repository on GitHub's free plan.
  • Netlify (Free plan) or Firebase Hosting (Spark plan), which publish a folder of files.
  • Notion, which publishes a page to the web on its free plan, at a notion.site address.

Each service has its own terms and limits, so read them before you rely on one. Check two points on any of them. The address should stay the same after you submit, so that the link in your listing keeps working. The page should load without a sign-in.

If you want one address that holds the app's page, the support page and the privacy page together, put them on a domain you own, so the links outlive any one host.

Before you submit

  1. Open the Support URL in a private window and check that it loads and shows a way to contact you.
  2. Open the Privacy Policy URL the same way, and check the same link opens from a screen in your app.
  3. Read the policy against what the app really does, including every SDK it ships.
  4. Enter both full addresses in the matching fields in App Store Connect.

If you would rather have the site done for you

Alexandra Swan (ABN 22 415 755 778) builds websites from your existing site, your social pages and the text and photos you send, and carries across text you already have. The build does not write your privacy policy. After launch you change the site by describing the change to Claude, the AI assistant made by Anthropic. The build is A$1,500 and the care plan is A$149 a month with a three-month minimum (A$447 in all), with no GST added. You pay for your own Claude plan and your domain renewal. The page sets out what is included and what is not. If you have an app and no site yet, email and say what you have, and Alexandra will tell you whether the offer fits.

See the websites offer

Sources

General information only. Check Apple's pages before you submit.