Skip to content
ShipSecurelySecurity reference
Menu

13 tools · 88 fixes · 22 incidents tracked · Updated Oct 13, 2026 · Sources: Supabase, GitHub, OWASP, Stripe + 9

Next.js

Missing privacy policy and terms in Next.js

mediumUpdated Oct 13, 2026

Add two routes, /privacy and /terms , linked from the footer on every page including signup. Write them from the data you actually collect.

Fix for Next.js

Add two routes, /privacy and /terms, linked from the footer on every page including signup. Write them from the data you actually collect. Include:

  • What you collect (account email, files, payment status, logs).
  • Why.
  • Who else processes it, by name.
  • How long you keep it, in words a person can check.
  • How to contact you and how to delete an account.

Use a real contact address that reaches you. Do not ship a customer app with an address that does not.

The five-minute check, the other platforms, and the agent prompt are on the full guide. More Next.js fixes are on the Next.js page.