I came across this great summary on GDPR https://westaway.co/gdpr
I am curious how you are handling it for your project
For me, I took the Privacy Policy from Intercom (because it was apparently one of the most complete ...), compared it with a few others, copied the original version, read the whole document, and changed/tweaked/adapted the essential parts.
It took me two hours (I'd say .. only?), but here's the result. It's a lot like Intercom's of course, but I think the general Privacy Policies I read was quite similar, so I think it will be ok.
I also followed some "best practices" recommended regarding GDPR. I believe I'm not that bad now.
The good thing is that the EU warns you before slapping you, so if there are any issues with mine, I'll know it before having to pay any fine :)