Answer five questions about your website and get a complete, tailored cookie policy — ready to paste into your site in under two minutes.
Nothing leaves this page — everything is generated locally.
A policy is step one. Many sites still fire analytics and ad cookies before consent — the exact practice regulators fine for. Run a free scan to check your headers, cookies, forms and legal pages.
Scan your site freeIf you set any non-essential cookie on a site reachable by EU or UK visitors, yes: the ePrivacy Directive and GDPR require informed consent, and a cookie policy documenting each cookie's purpose, provider and lifetime is how most sites satisfy the information duty. It should be linked directly from your consent banner.
The privacy policy covers all personal-data processing; the cookie policy covers only cookies and similar technologies. They overlap, so most sites publish both and cross-link them. Our template packs include matching versions of each.
Yes. Strictly necessary cookies — sessions, carts, security tokens, server-side load balancing — are exempt from consent, but not from disclosure. Your policy must still list them.
In practice, yes across the EU. European regulators have held that GA's use of cookies and IP transfer needs prior opt-in consent (with anonymous/IP-truncated configurations treated more leniently in some countries). Never fire analytics tags before the visitor accepts.
Every time you add or remove a tracking tool, and at least annually as a review habit. Regulators expect the policy to match what actually fires — a mismatch is itself a finding. The EUComply Pro plan includes re-scan monitoring that surfaces drift.
Disclaimer: This generator provides general information, not legal advice. Generated text is a starting point based on GDPR and the ePrivacy Directive; requirements vary by country and business. For specific obligations consult a qualified lawyer.