A cookie policy explains the cookies and similar technologies your site sets, what they do, and how visitors can control them. In the EU/UK it works hand in hand with a consent banner.
Why you need a cookie policy
If you use analytics, advertising, or any non-essential cookies, EU and UK rules require both disclosure and prior consent. A cookie policy is the disclosure half of that obligation.
What your cookie policy should include
- The categories of cookies you set (essential, analytics, advertising)
- Named third-party cookies and their purpose
- Cookie lifespans
- How users grant or withdraw consent
- Links to third-party opt-outs
Frequently asked questions
Do I need a cookie policy and a consent banner?
In the EU and UK, non-essential cookies require prior consent (a banner) plus disclosure (a cookie policy). Elsewhere the banner may be optional, but the disclosure is still best practice.