Free cookie policy templates list every cookie category imaginable. CompliKit asks which analytics, advertising, and functional tools you actually use and generates a disclosure that's accurate — which is what GDPR actually requires.
A cookie policy discloses the cookies your website sets on visitors' devices, why each cookie is used, who controls it (you or a third party), and how users can manage or opt out. Under the EU ePrivacy Directive and GDPR, this disclosure is legally required if your site uses any cookies beyond those strictly necessary for the site to function.
Most websites use at least three cookie categories without realizing it: session cookies from their backend, analytics cookies from Google Analytics, and advertising pixels from Meta or Google. Each of these requires disclosure in your cookie policy and — for non-essential cookies — prior consent from EU visitors.
The cost of getting this wrong is real. In 2022 and 2023, regulators issued millions in fines specifically over cookie consent. Google, Meta, and TikTok have all been targeted. The standard has moved: "we use cookies" in your footer is not sufficient disclosure. A policy that lists your actual cookies with accurate descriptions is.
Requires consent before setting non-essential cookies. Applies to any website with EU visitors — regardless of where you're based.
Tracking cookies that identify individual users are personal data under GDPR. Full disclosure and consent requirements apply.
Advertising cookies used for cross-context behavioral advertising require opt-out options for California residents.
The UK maintains its own version of GDPR with the same cookie consent requirements as the EU. UK visitors are covered separately.
CompliKit generates a policy based on the specific tools and cookies you actually use on your site.
A structured disclosure of every cookie type you use, organized by necessary vs. consent-required categories.
Named disclosure of each third-party platform: Google Analytics, Meta Pixel, Stripe, Intercom — with accurate descriptions of what each collects.
Session vs. persistent cookie distinction, with retention periods for each major cookie category.
How users can reject or manage cookies through browser settings, Google's opt-out tools, and your consent management approach.
For cookies that transfer data outside the EU (most US-based services), disclosure of the transfer mechanism under GDPR.
When the policy was last updated and how to contact you with cookie-related privacy requests.
A cookie policy handles cookie disclosure. But GDPR compliance also requires a full privacy policy explaining your broader data practices, and terms of service establishing your user agreements. CompliKit generates all six legal documents in one session — each one customized to your business.
What you need to know about GDPR cookie compliance before you generate yours.
Answer 10 questions about your business and the tools you use. Get a cookie policy — and 5 other legal documents — that accurately reflects your actual setup.
Generate My Cookie Policy — $19