Cookie Policy Builder

Create a cookie policy listing types of cookies and user consent options

Create a cookie policy listing cookie categories (necessary, preferences, analytics, marketing), third-party services, retention periods, and how visitors give or withdraw consent under GDPR and the ePrivacy rules. Not legal advice.

Which cookies need consent?

Under GDPR and ePrivacy rules, all cookies except strictly necessary ones require the user's prior consent. That means preference, analytics, and marketing cookies must be off until the visitor accepts them through a consent banner.

List your cookies clearly and lawfully

Cookie laws require you to tell visitors which cookies you use, what they do, and how to control them — and to obtain consent before setting any that aren’t strictly necessary. A cookie policy is the document that does the explaining; this builder assembles one from the categories you actually use.

How it works

Cookies are grouped into four standard categories, each with a different consent status:

  • Strictly necessary — always on, no consent required, because the site cannot function without them.
  • Preferences / functional — remember settings; require consent.
  • Analytics / performance — measure usage; require consent.
  • Marketing / advertising — cross-site tracking; require consent.

The generator writes sections on what cookies are, the categories you selected, third-party cookies, retention, your consent mechanism, changes, and contact. If you select any consent-required category, it describes a banner with accept and reject options and a way to change choices later.

Tips and notes

Run an actual cookie scan of your site so the policy matches reality — undeclared trackers are the most common compliance gap. Make rejecting non-essential cookies as easy as accepting them, and store the user’s choice so you don’t re-prompt every visit. Keep the third-party list current as you add or remove tools. This is a template, not legal advice.