Why does Meta say my privacy policy URL is invalid?

Usually the page is not public, needs a login, is geoblocked, redirects, or can’t be fetched by Meta’s crawler. The Platform Terms require an active, public, crawlable, non-geoblocked URL.

What is a Facebook data deletion URL?

A page or callback that tells users how to delete the data your app received from Meta. Meta requires a clearly marked way to request deletion.

Meta for Developers · Platform guide

Privacy policy for Facebook Login and Meta apps

Meta’s Platform Terms require any app using Facebook Login or other Meta APIs to keep a privacy policy at an active, public, crawlable, non-geoblocked URL entered in the App Dashboard. It must explain what data you process, how and why, and how users can request deletion — available to every user.

§ 1

What Meta for Developers requires

Meta Platform Terms — 4. Privacy Policy

“You will provide, maintain, and comply with a privacy policy that is available through an active, publicly available, easily accessible (including by our crawlers), and non-geoblocked URL.”

Source: developers.facebook.com verified 2026-10-30

1.1Put the URL in the App Dashboard. “This URL must also be disclosed in the privacy policy field in the settings of your App Dashboard.” Source: developers.facebook.com

1.2Required contents and deletion. “Your privacy policy must clearly explain what data you are Processing, how you are Processing it, the purposes for which you are Processing it, and how Users may request deletion of that data.” Source: developers.facebook.com

1.3A clear way to delete. Give users “an easily accessible and clearly marked way to ask for their Platform Data to be modified or deleted.” Source: developers.facebook.com

1.4No selling Platform Data. Meta lists “Selling, licensing, or purchasing Platform Data.” as a prohibited practice. Source: developers.facebook.com

§ 2

What common SDKs collect

SDK / API	Data it collects	Source
Facebook Login (Platform Data)	Meta user IDs and access tokens Email addresses Profile pictures and usernames	Source: developers.facebook.com

Everything in this table must appear in your policy if the SDK ships in your build.

§ 3

Where to put the URL

3.1Meta App Dashboard → App settings → Basic → Privacy Policy URL.
3.2Also provide a data deletion instructions URL or callback in the same settings.
3.3Your app’s login screen and Settings.

§ 4

Sample clause

§ 4.1 · Facebook Login

If you log in with Facebook, we receive your Facebook user ID, name, email address and profile picture. We use them only to create your account. To delete this data, use Settings → Delete account or email privacy@example.com; we delete it within 30 days.

Illustrative wording. Your generated policy is written from your own answers.

§ 5

Questions

Why does Meta say my privacy policy URL is invalid?: Usually the page is not public, needs a login, is geoblocked, redirects, or can’t be fetched by Meta’s crawler. The Platform Terms require an active, public, crawlable, non-geoblocked URL.
What is a Facebook data deletion URL?: A page or callback that tells users how to delete the data your app received from Meta. Meta requires a clearly marked way to request deletion.