How to use the cookie policy generator
- Enter Business or legal name, Website, Contact email, an optional Postal address and the Effective date.
- Tick the optional categories you use: Preferences cookies, Analytics cookies (ticked by default) and Marketing cookies. A “Strictly necessary” section is always included.
- In Cookie list (name | provider | purpose | duration | category), write one cookie per line with the five parts separated by a vertical bar.
- Leave We use a consent banner and Mention EU/UK consent rules ticked if they apply, then copy or download
cookie-policy.md.
What it does and when to use it
Use it when your site sets cookies or uses local storage and you need a page that explains them in plain words. The policy has an opening line, a “What cookies are” section, a short description of each ticked category, your cookie table, a “Your choices” section about browser settings, a “Changes” section and contact details.
It does not cover scanning your site, sorting cookies into the right category, blocking cookies before consent, or describing what you do with the data afterwards. That data use belongs in a privacy policy; the privacy policy generator can link to this page through its Cookie policy URL field.
How it works
The text is assembled in your browser from fixed paragraphs and your answers; nothing is uploaded. Each line of the cookie list is split at the | signs into Name, Provider, Purpose, Duration and Category. Missing parts become empty cells and anything after the fifth part is dropped. With We use a consent banner ticked, “Your choices” says non-essential cookies are set only after consent and that visitors can change their choice through a cookie settings link in the footer. Mention EU/UK consent rules adds a sentence about the ePrivacy rules and PECR.
Worked examples
Default analytics site. The two sample lines produce a table that includes | _ga | Google Analytics | Distinguishes visitors | 2 years | Analytics |. The EU/UK sentence ends “generally require consent before non-essential cookies are stored on your device.”
All categories, no list, no banner. Tick Preferences and Marketing, clear the list and untick both consent options. The policy now has four category headings, from “### Strictly necessary” to “### Marketing”, no table, and only the browser-settings advice under “Your choices”.
Limits and tips
- Promise only what your site does. If the banner option is ticked, the policy tells visitors there is a cookie settings link in the footer. Add that link, or untick the option.
- Do not set cookies early. The ICO says you cannot set non-essential cookies on your home page before the user has consented.
- Keep the list current. Re-run the tool when you add a plugin or tag. The tool does not check durations; copy them from the cookie or the provider.
- Laws differ. These sources cover the EU and UK. Other countries have their own rules, so treat the output as a draft.
Frequently asked questions
Does the tool find the cookies on my site?
Is a cookie policy enough on its own?
Which cookies can I set without consent?
Is this legal advice?
Sources
- Directive 2002/58/EC (ePrivacy Directive), Article 5(3) — EUR-Lex, Publications Office of the European Union, accessed 2026-10-07
- Cookies and similar technologies (guide to PECR) — Information Commissioner's Office (UK), accessed 2026-10-07
How do we know nothing is uploaded? Test it yourself on the privacy proof page.