Google is requiring a privacy policy for your website if you want to use it's gmail api. It won't give you a long term access token unless you go through a verification process for your app. You can still have your app under a testing stage, but you would have to renew your access token every week.

You can find some basic privacy policy generators, ones that cover google analytics & sending emails next.

1. termly.io, you can sign up for a free account & they will give you access to 1 policy.

2. privacypolicygenerator.info, don't need an account, just enter in some info & they will generate it.

3. zyro.com, just enter in some info & they will generate it for you.

If you have google analytics on your site, it isn't required that you have the user agree to use cookies(although it does hold up a lot better in court if a user takes issue with your site's privacy). You can have the user opt-out of it with a browser add-on which can be found here.