Permissions Policy Generator

Generate a privacy-first Permissions-Policy header for camera, microphone, geolocation, payment, clipboard, and browser APIs locally.

Permissions Policy workspace

Generate a Permissions-Policy header and Cloudflare _headers block locally.

Preset

CameraMicrophoneGeolocationPaymentScreen captureClipboard readClipboard writeFullscreenWeb shareUSBSerialBluetoothMIDIAccelerometerGyroscopeMagnetometer

Generated policy

Copy the header value or the Cloudflare Pages _headers block.

camera=(), microphone=(), geolocation=(), payment=(), display-capture=(), clipboard-read=(), clipboard-write=(self), fullscreen=(self), web-share=(self), usb=(), serial=(), bluetooth=(), midi=(), accelerometer=(), gyroscope=(), magnetometer=()

Output

Features: 16Blocked: 13Self: 3Public: 0Warnings: 0Processing: Local

Privacy-first policy

Sensitive browser APIs are blocked unless you explicitly allow them.

Cloudflare _headers

/*
  Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), display-capture=(), clipboard-read=(), clipboard-write=(self), fullscreen=(self), web-share=(self), usb=(), serial=(), bluetooth=(), midi=(), accelerometer=(), gyroscope=(), magnetometer=()

Files are processed in your browser. No data is uploaded.

Questions

What does Permissions-Policy do?

Permissions-Policy controls which browser features such as camera, microphone, geolocation, payment, and clipboard can be used by your page or embedded frames.

Should I block camera, microphone, and geolocation?

Yes, unless your product explicitly needs them. A privacy-first policy blocks sensitive APIs by default and only allows specific features when the user flow requires them.

Can I use this with Cloudflare Pages?

Yes. Copy the generated _headers block into your Cloudflare Pages project and test affected pages after deployment.

Does Utilumo upload my input?

No. This tool is designed for local browser processing and does not send your input to a server.

Do I need an account?

No. Utilumo tools are built to work without accounts or sign-in.