Legal Pages in the Next.js Supabase Turbo Starter Kit

Create and customize legal pages including Terms of Service, Privacy Policy, and Cookie Policy in your Makerkit application.

Legal pages in Makerkit are MDX files located at apps/web/app/(marketing)/(legal)/. The kit includes placeholder files for Terms of Service, Privacy Policy, and Cookie Policy that you must customize with your own content.

Legal Pages Setup

Configure your SaaS application's legal pages

Makerkit includes three legal page templates:

PageFile LocationURL
Terms of Serviceapps/web/app/(marketing)/(legal)/terms-of-service/page.mdx/terms-of-service
Privacy Policyapps/web/app/(marketing)/(legal)/privacy-policy/page.mdx/privacy-policy
Cookie Policyapps/web/app/(marketing)/(legal)/cookie-policy/page.mdx/cookie-policy

Basic MDX Structure

Each legal page uses MDX format with frontmatter:

apps/web/app/(marketing)/(legal)/privacy-policy/page.mdx

---
title: "Privacy Policy"
description: "How we collect, use, and protect your personal information"
---
# Privacy Policy
**Last updated: January 2026**
## Information We Collect
We collect information you provide directly...
## How We Use Your Information
We use the information we collect to...
## Contact Us
If you have questions about this Privacy Policy, contact us at...

Adding Last Updated Dates

Include a visible "Last updated" date in your legal pages. This helps with compliance and user trust:

**Last updated: January 15, 2026**
*This policy is effective as of the date above and replaces any prior versions.*

Structuring Long Documents

For complex legal documents, use clear heading hierarchy:

# Privacy Policy
## 1. Information Collection
### 1.1 Information You Provide
### 1.2 Information Collected Automatically
### 1.3 Information from Third Parties
## 2. Use of Information
### 2.1 Service Delivery
### 2.2 Communications
### 2.3 Analytics and Improvements
## 3. Data Sharing
...

Create additional legal pages in the (legal) directory:

# Create a new legal page
mkdir -p apps/web/app/\(marketing\)/\(legal\)/acceptable-use
touch apps/web/app/\(marketing\)/\(legal\)/acceptable-use/page.mdx

Add the content:

apps/web/app/(marketing)/(legal)/acceptable-use/page.mdx

---
title: "Acceptable Use Policy"
description: "Guidelines for using our service responsibly"
---
# Acceptable Use Policy
**Last updated: January 2026**
This Acceptable Use Policy outlines prohibited activities...

Update Navigation

Add links to new legal pages in your footer or navigation. The footer typically lives in:

apps/web/app/(marketing)/_components/footer.tsx

Update Sitemap

Add new legal pages to your sitemap in apps/web/app/sitemap.xml/route.ts:

function getPaths() {
const paths = [
// ... existing paths
'/acceptable-use', // Add new legal page
];
return paths.map((path) => ({
loc: new URL(path, appConfig.url).href,
lastmod: new Date().toISOString(),
}));
}

For organizations that need non-developers to update legal content, use the CMS integration:

apps/web/app/(marketing)/(legal)/privacy-policy/page.tsx

import { createCmsClient } from '@kit/cms';
export default async function PrivacyPolicyPage() {
const cms = await createCmsClient();
const { title, content } = await cms.getContentBySlug({
slug: 'privacy-policy',
collection: 'pages',
});
return (
<article className="prose prose-gray max-w-3xl mx-auto py-12">
<h1>{title}</h1>
<div dangerouslySetInnerHTML={{ __html: content }} />
</article>
);
}
  1. Create a pages collection in your CMS (Keystatic, WordPress, or custom)
  2. Add entries for each legal page with slugs matching the URL paths
  3. Use the CMS admin interface to edit content without code changes

See the CMS documentation for detailed setup instructions.

What to Include

Privacy Policy should cover:

  • What data you collect (personal info, usage data, cookies)
  • How you use the data
  • Third-party services (analytics, payment processors)
  • User rights (access, deletion, portability)
  • Contact information

Terms of Service should cover:

  • Service description and limitations
  • User responsibilities and prohibited uses
  • Payment terms (if applicable)
  • Intellectual property rights
  • Limitation of liability
  • Termination conditions

Cookie Policy should cover:

  • Types of cookies used (essential, analytics, marketing)
  • Purpose of each cookie type
  • How to manage cookie preferences
  • Third-party cookies

Compliance Considerations

RegulationRequirements
GDPR (EU)Privacy policy, cookie consent, data subject rights
CCPA (California)Privacy policy with specific disclosures, opt-out rights
LGPD (Brazil)Privacy policy, consent mechanisms, data protection officer