diff --git a/modules/setting/service.go b/modules/setting/service.go
index cc84ac7257..ff7c7c8829 100644
--- a/modules/setting/service.go
+++ b/modules/setting/service.go
@@ -89,6 +89,7 @@ var Service = struct {
 	ValidSiteURLSchemes                     []string
 	UsernameCooldownPeriod                  int64
 	MaxUserRedirects                        int64
+	PrivacyPolicyURL                        string
 
 	// OpenID settings
 	EnableOpenIDSignIn bool
@@ -297,6 +298,8 @@ func loadServiceFrom(rootCfg ConfigProvider) {
 	}
 	Service.MaxUserRedirects = sec.Key("MAX_USER_REDIRECTS").MustInt64(maxUserRedirectsDefault)
 
+	Service.PrivacyPolicyURL = sec.Key("PRIVACY_POLICY_URL").MustString("")
+
 	mustMapSetting(rootCfg, "service.explore", &Service.Explore)
 
 	loadOpenIDSetting(rootCfg)
diff --git a/modules/web/middleware/data.go b/modules/web/middleware/data.go
index 08d83f94be..d33cf966c4 100644
--- a/modules/web/middleware/data.go
+++ b/modules/web/middleware/data.go
@@ -58,6 +58,7 @@ func CommonTemplateContextData() ContextData {
 		"EnableOpenIDSignIn": setting.Service.EnableOpenIDSignIn,
 		"PageStartTime":      time.Now(),
 
-		"RunModeIsProd": setting.IsProd,
+		"RunModeIsProd":    setting.IsProd,
+		"PrivacyPolicyURL": setting.Service.PrivacyPolicyURL,
 	}
 }
diff --git a/options/locale/locale_en-US.ini b/options/locale/locale_en-US.ini
index cc3bab10c0..e8af2b5f0c 100644
--- a/options/locale/locale_en-US.ini
+++ b/options/locale/locale_en-US.ini
@@ -28,6 +28,7 @@ licenses = Licenses
 return_to_forgejo = Return to Forgejo
 toggle_menu = Toggle menu
 more_items = More items
+privacy_policy = Privacy Policy
 
 username = Username
 email = Email address
@@ -38,6 +39,7 @@ captcha = CAPTCHA
 twofa = Two-factor authentication
 twofa_scratch = Two-factor scratch code
 passcode = Passcode
+consent_agree = I agree to the <a href="%s">Privacy Policy</a>
 
 webauthn_insert_key = Insert your security key
 webauthn_sign_in = Press the button on your security key. If your security key has no button, re-insert it.
@@ -489,6 +491,7 @@ password_pwned_err = Could not complete request to HaveIBeenPwned
 last_admin = You cannot remove the last admin. There must be at least one admin.
 back_to_sign_in = Back to Sign in
 sign_in_openid = Proceed with OpenID
+must_consent = Agreement to our Privacy Policy is required to register.
 
 [mail]
 view_it_on = View it on %s
diff --git a/routers/web/auth/auth.go b/routers/web/auth/auth.go
index 1d00c97b6e..816e6534d2 100644
--- a/routers/web/auth/auth.go
+++ b/routers/web/auth/auth.go
@@ -447,6 +447,11 @@ func SignUpPost(ctx *context.Context) {
 		return
 	}
 
+	if !form.Consent {
+		ctx.RenderWithErr(ctx.Tr("auth.must_consent"), tplSignUp, &form)
+		return
+	}
+
 	context.VerifyCaptcha(ctx, tplSignUp, form)
 	if ctx.Written() {
 		return
diff --git a/services/forms/user_form.go b/services/forms/user_form.go
index d76e97ceb1..c64d7f0b4a 100644
--- a/services/forms/user_form.go
+++ b/services/forms/user_form.go
@@ -96,6 +96,7 @@ type RegisterForm struct {
 	Email    string `binding:"Required;MaxSize(254)"`
 	Password string `binding:"MaxSize(255)"`
 	Retype   string
+	Consent  bool // privacy policy consent
 }
 
 // Validate validates the fields
diff --git a/templates/base/footer_content.tmpl b/templates/base/footer_content.tmpl
index 133ebac33a..867eec02ce 100644
--- a/templates/base/footer_content.tmpl
+++ b/templates/base/footer_content.tmpl
@@ -27,6 +27,7 @@
 		</div>
 		<a href="{{AssetUrlPrefix}}/licenses.txt">{{ctx.Locale.Tr "licenses"}}</a>
 		{{if .EnableSwagger}}<a href="{{AppSubUrl}}/api/swagger">API</a>{{end}}
+		{{if .PrivacyPolicyURL}}<a href="{{.PrivacyPolicyURL}}">{{ctx.Locale.Tr "privacy_policy"}}</a>{{end}}
 		{{template "custom/extra_links_footer" .}}
 	</div>
 </footer>
diff --git a/templates/user/auth/consent.tmpl b/templates/user/auth/consent.tmpl
new file mode 100644
index 0000000000..e9ada64d3b
--- /dev/null
+++ b/templates/user/auth/consent.tmpl
@@ -0,0 +1,10 @@
+{{ if (.PrivacyPolicyURL) }}
+  <div class="inline field required">
+    <div class="ui checkbox">
+      <input id="consent" name="consent" type="checkbox">
+      <label for="consent">{{ ctx.Locale.Tr "consent_agree" .PrivacyPolicyURL }}</label>
+    </div>
+  </div>
+{{ else }}
+  <input id="consent" name="consent" type="checkbox" checked hidden>
+{{ end }}
diff --git a/templates/user/auth/signup_inner.tmpl b/templates/user/auth/signup_inner.tmpl
index 6c5ac6731f..f47acded74 100644
--- a/templates/user/auth/signup_inner.tmpl
+++ b/templates/user/auth/signup_inner.tmpl
@@ -37,6 +37,8 @@
 
 				{{template "user/auth/captcha" .}}
 
+				{{template "user/auth/consent" .}}
+
 				<div class="inline field">
 					<button class="ui primary button tw-w-full">
 						{{if .LinkAccountMode}}