Privacy Statement Generator

Cookie Policy Generator

Answer a few questions about which cookies and third-party services your site uses and watch your policy take shape on the right. Free, no signup, nothing you type here leaves your browser.

By , Privacy Statement Generator

No signup. No email required. Nothing you enter is sent anywhere, this form runs entirely in your browser.

About your site
Cookie categories you use

Strictly necessary cookies (like login sessions or security) are covered automatically below, most sites can't function without them.

Third-party services
Consent & contact
Live preview
This generates a cookie policy document, not a consent banner. If you need visitors to actively accept or decline cookies before they load, that's a separate consent-management script, this tool only produces the written disclosure.

How to use the cookie policy generator

  1. Check off which categories of cookies your site sets and which third-party services you use.
  2. Watch the policy build on the right.
  3. Copy or download it, and link to it from your footer, ideally next to (or referenced from) your privacy policy.

Why a cookie policy matters

A cookie policy is a page that lists the cookies your site sets and the third parties behind them, so visitors aren't left guessing. It is required in some form under most privacy laws that mention cookies specifically, including the EU's ePrivacy rules and, for opt-out purposes, California's CCPA/CPRA.

What the cookie policy will include

Depending on your answers, the generated document can include these sections:

Is this cookie policy generator really free?

Yes. No signup or email required, and there's no paid version this is holding back from you.

Where does my information go when I fill out the form?

Nowhere but your own browser. The form runs entirely client-side, so your answers about your cookies and third-party services aren't sent to a server or stored anywhere on our end.

Does this also add a cookie consent banner to my site?

No. This generates the written policy document that explains your cookies, it doesn't add a live banner or block cookies from loading. A consent banner is a separate script that actually runs on your site, a different kind of tool from a document generator.

Do I need a cookie policy if I don't think I use cookies?

Worth double-checking before assuming that. Most sites set at least a few cookies without the owner realizing, for login sessions, security, basic analytics, or embedded content like a YouTube video. If you're not setting any, a brief note in your privacy policy usually covers it instead of a standalone page.

Is a cookie policy the same as a privacy policy?

They're related but not identical. Many sites fold cookie disclosure into their main privacy policy, which is fine. A standalone cookie policy just makes that section easier to find and update on its own, especially useful if you add or drop a third-party service later and don't want to touch the whole privacy policy to do it.

Do I need consent before setting cookies, or is disclosure enough?

It depends on where your visitors are. EU and UK rules generally require consent before non-essential cookies load, which is why sites serving those regions use a consent banner. US laws like the CCPA/CPRA generally take a disclosure-plus-opt-out approach instead. See GDPR and CCPA basics for more on how the two frameworks differ.

I use Google Analytics or an ad network, does that change anything?

It's worth naming them specifically. A vague "we may use third parties" line is weaker disclosure than actually listing who they are, which is exactly why this tool asks you to check off the services you use rather than writing one generic sentence.

Privacy Statement Generator

Pair your cookie policy with a privacy statement covering the rest of your data practices.

This generator was built by Cedrick Reese. Its clause language follows the general structure used in cookie policies across the web: what cookies are, which categories a site uses, which third parties set them, and how a visitor can control them. It's checked periodically against the EU's ePrivacy Directive and GDPR cookie-consent guidance and the CCPA/CPRA's opt-out requirements, and updated if that general guidance changes. It doesn't know which specific cookies your site actually sets today, so you'll still need to make sure the categories and services you select here match reality.