Free Cookie Policy Generator
This free cookie policy generator writes a cookie policy page for your website from your business name, website address and contact email. Tick the kinds of cookies your site sets, such as analytics, advertising, functional and social media cookies, and it returns clean HTML to paste into your site plus a plain-text copy, including the consent and opt-out wording the EU and UK rules expect.
Cookie Policy Generator
Generators and Converters
About this tool
The policy explains what cookies are, which categories the Website uses and why, how long they last, and how visitors can accept, refuse or delete them. Essential cookies are always included because every site needs them. Each category you tick adds a plain-English description, the typical cookies in that category, such as the Google Analytics _ga cookie or the AdSense advertising cookies, and the opt-out route for it.
The HTML version uses only headings, paragraphs, lists and a simple table, so it drops into WordPress, Shopify, Wix or a hand-coded page and takes your site's styling. The plain-text version suits a PDF or a consent banner "learn more" screen. Both carry the generation date as the "last updated" line. Nothing you type is stored on our server.
A generated policy is a starting point, not legal advice. Under the EU ePrivacy rules and the UK PECR, non-essential cookies need consent before they are set, which means a consent banner on the site, not only a policy page. The generator cannot see which cookies your plugins and embeds actually set, so run a cookie scan or check your browser's developer tools and edit the list to match.
Frequently asked questions
Do I need a cookie policy as well as a privacy policy?
A privacy policy can include a cookies section, and for a small site with only essential and analytics cookies that is often enough. A separate cookie policy is expected when you run advertising, embed social media or use several tracking tools, because consent tools link to it and visitors want to see each category explained. Many sites keep both pages.
Do I need a cookie consent banner?
If you have visitors from the EU or UK and set any non-essential cookie, such as analytics or advertising cookies, yes: those rules require consent before the cookie is set, and a policy page alone does not give it. Google also requires a certified consent tool for AdSense and Ad Manager traffic from those regions. Visitors elsewhere usually only need a clear policy.
Which cookies count as essential?
Cookies the site cannot work without: the session cookie that keeps you logged in, the one that remembers your shopping basket, security tokens that stop form forgery, and the cookie that records your cookie choices. They do not need consent. Analytics, advertising, A/B testing and social media cookies are not essential, however useful they are to you.
How do I find out which cookies my site sets?
Open your site in a private browser window, open the developer tools, and look at the Application or Storage tab to see every cookie with its name, domain and expiry. Repeat on a page with embedded videos or social buttons, because those set their own cookies. Free cookie scanners can do the same across the whole site.
Can I just copy a cookie policy from another site?
Copying text is a copyright problem and, worse, it describes their cookies rather than yours. Generate your own, then edit the cookie list to match what a scan of your site shows. Keep the "last updated" date current whenever you add a new tool or embed.