Cookie Policy Template

In short

Some laws, such as the ePrivacy Directive and the General Data Protection Regulation (GDPR), require websites to detail their use of cookies to users. In this short post, we’ll share with you a free cookie policy template and go through what you need to create a valid cookie policy.

In this article

• What is a cookie policy?
• Is it mandatory to have a cookies policy?
• Do I need a separate cookie policy?
• What do you write in a cookie policy?
• Can I use a cookie policy generator for my documents?
• How can you get user consent for your cookies policy?
• Download our sample cookie policy template for your website
• Do I need a cookie policy template on my website in UK?
• Examples of cookie policies
• Where do I display my cookie policy page?
• Easily create your cookie policy in minutes

What is a cookie policy?

Unlike a privacy policy, which makes legally required disclosures about your data processing activities in general, the cookie policy deals specifically with your use of cookies and contains those particular legally required disclosures – which we will explain below.

Keep in mind that the cookie policy is often a dedicated section of a website’s or app’s main privacy policy.

First thing first, under the law, you’ll need to show a cookie banner (also called cookie notice) to inform site visitors and allow your users to provide or deny consent. In your cookie banner, you must link to your cookie policy and make details of cookies’ purposes, usage, and related third-party activities available to the user.

Want to learn more about cookies and cookie consent? Read also how to manage cookies consent on WordPress.

---

Also consider that your policy should be available in all the languages in which your services are provided.

Can I use a cookie policy generator for my documents?

The good news is yes, you absolutely can!

But it’s best to remain prudent. Choose a high-quality cookie policy generator that, at the very least, contains clauses written by actual legal professionals and that lets you fully customize your document to your needs.

How can you get user consent for your cookies policy?

To comply with consent requirements for your cookies policy, users must actively indicate their agreement.

This can be done through actions such as:

• checking a box,
• providing information to proceed to the website, or
• clicking on cookie settings to acknowledge that they have read, understood, and wish to proceed with the associated policy.

Download our sample cookie policy template for your website

How to use the template

1. Download the template: get our free cookie policy template in Word/PDF or copy and paste the HTML directly into your website.
2. Fill in site and contact details: before publishing, fill in all [brackets] with your site info and contact details.
3. Customize data collection: the template gives the example of Google Analytics and a contact form. For other services, add and customize data collection information.

A cookie policy isn’t a static document. Every time you add a new tool that installs cookies, like analytics, advertising, or social widgets, your policy has to reflect it, so a generic template falls out of date fast. That’s why we suggest either working with a lawyer or using a professional generator like iubenda: it scans your site to detect the cookies you actually use, lets you customize from over 2000 lawyer-crafted clauses, and helps you keep your policy current as your setup changes, instead of maintaining a static cookie policy template by hand.

Cookie policy template (HTML text) copy-paste

Copy and paste the cookie policy template HTML directly into your website.

<h1><strong>Cookie Policy of [<a href="http://www.testsite.com/">www.testsite.com</a>]</strong></h1>
<p>Last updated: [date]</p>
<p>We are [Company Name]. This cookie policy outlines how we collect, use, and manage cookies, and we outline your rights and choices regarding cookie usage.</p>
<p>You can contact us at [email address].</p>
<hr>
<h2>Table of contents</h2>
<ul>
 <li>Introduction</li>
 <li>Contact information</li>
 <li>Activities strictly necessary for the operation of this website and delivery of the service</li>
 <li>How to manage preferences and provide or withdraw consent</li>
 <li>Definitions and legal references</li>
</ul>
<hr>
<h2><strong>Introduction</strong></h2>
<p><strong>What is this policy about?</strong><br>
This document tells you about tracking technologies (“trackers”) that help this website achieve the purposes outlined in this document.</p>
<p><strong>What are trackers?</strong><br>
For simplicity, all such technologies are defined as "trackers" within this document – unless there is a reason to differentiate. For example, while cookies can be used on both web and mobile browsers, it would be inaccurate to talk about cookies in the context of mobile apps as they are a browser-based tracker. For this reason, within this document, the term cookies is only used where it is specifically meant to indicate that particular type of tracker.</p>
<p>Some of the purposes for which trackers are used may also require your consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.</p>
<p>This website uses trackers managed directly by us (so-called “first-party” trackers) and trackers that enable services provided by a third-party (so-called “third-party” trackers). Unless otherwise specified within this document, third-party providers may access the trackers managed by them.</p>
<p>The validity and expiration periods of cookies and other similar trackers may vary depending on the lifetime set by us or the relevant provider. Some of them expire upon termination of your browsing session. In addition to what’s specified in the descriptions within each of the categories below, you may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other trackers— in the linked privacy policies of the respective third-party providers or by contacting us.</p>
<hr>
<h2>Contact Information</h2>
<p>Since the use of third-party trackers through this website cannot be fully controlled by us, any specific references to third-party trackers are to be considered indicative. In order to obtain complete information, you are kindly requested to consult the privacy policies of the respective third-party services listed in this document.</p>
<p>Given the objective complexity surrounding tracking technologies, you are encouraged to contact us should you wish to receive any further information on the use of such technologies by this website.</p>
<p><strong>Address:</strong><br>
[Street Address]<br>
[City, State ZIP Code]<br>
[Country]</p>
<p><strong>Email:</strong> [email address]</p>
<p><strong>Phone:</strong> [phone number]</p>
<hr>
<h2><strong>Activities strictly necessary for the operation of this website and delivery of the service</strong></h2>
<p>This website uses so-called “technical” cookies and other similar trackers to carry out activities that are strictly necessary for the operation or delivery of the service.</p>
<h3><strong>Other activities involving the use of trackers</strong></h3>
<h3><strong>Measurement</strong></h3>
<p>This website uses trackers to measure traffic and analyze user behavior to improve the service.</p>
<p><strong>Analytics</strong><br>
The services contained in this section enable us to monitor and analyze web traffic and can be used to keep track of user behavior.</p>
<p><strong>Google Analytics (Universal Analytics) (Google LLC)</strong><br>
Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of this website, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network.</p>
<p>To understand Google's use of data, consult Google's <a href="https://policies.google.com/technologies/partner-sites">partner policy</a> and their <a href="https://business.safety.google/privacy/">Business data page</a>.</p>
<p><strong>Personal data processed:</strong> Trackers; Usage data <br>
<strong>Place of processing:</strong> United States<br>
<strong>Privacy policy:</strong><a href="https://business.safety.google/privacy/">https://business.safety.google/privacy/</a><br>
<strong>Opt-out link:</strong><a href="https://tools.google.com/dlpage/gaoptout">https://tools.google.com/dlpage/gaoptout</a></p>
<p><strong>Storage duration:</strong><br>
AMP_TOKEN: 1 hour<br>
_ga: 2 years<br>
_gac*: 3 months<br>
_gat: 1 minute<br>
_gid: 1 day</p>
<hr>
<h2><strong>How to manage preferences and provide or withdraw consent</strong></h2>
<p>There are various ways to manage tracker related preferences and to provide and withdraw consent, where relevant:</p>
<p>You can manage preferences related to trackers from directly within your own device settings, for example, by preventing the use or storage of trackers.</p>
<p>Additionally, whenever the use of trackers is based on consent, you can provide or withdraw such consent by setting your preferences within the cookie notice or by updating such preferences accordingly via the relevant consent-preferences privacy widget, if available.</p>
<p>It is also possible, via relevant browser or device features, to delete previously stored trackers, including those used to remember your initial consent preferences.</p>
<p>Other trackers in the browser’s local memory may be cleared by deleting the browsing history.</p>
<p>With regard to any third-party trackers, you can manage your preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.</p>
<h3><strong>Locating tracker settings</strong></h3>
<p>You can, for example, find information about how to manage cookies in the most commonly used browsers at the following addresses:</p>
<ul>
 <li><a href="https://support.google.com/chrome/answer/95647?hl=en&p=cpn_cookies">Google Chrome</a></li>
 <li><a href="https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?redirectslug=enable-and-disable-cookies-website-preferences&redirectlocale=en-US">Mozilla Firefox</a></li>
 <li><a href="https://support.apple.com/en-za/guide/safari/sfri11471/mac">Apple Safari</a></li>
 <li><a href="https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d">Microsoft Internet Explorer</a></li>
 <li><a href="https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d">Microsoft Edge</a></li>
 <li><a href="https://support.brave.com/hc/en-us/articles/360022806212-How-do-I-use-Shields-while-browsing">Brave</a></li>
 <li><a href="https://help.opera.com/en/latest/web-preferences/#cookies">Opera</a></li>
</ul>
<p>You may also manage certain categories of trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (you may open the device settings and look for the relevant setting).</p>
<h3><strong>Consequences of denying the use of trackers</strong></h3>
<p>You are free to decide whether or not to allow the use of trackers. However, please note that trackers help this website to provide a better experience and advanced functionalities to you (in line with the purposes outlined in this document). Therefore, if you choose to block the use of trackers, we may be unable to provide related features.</p>
<h2><strong>Definitions and legal references</strong></h2>
<p><strong>Personal data (or data)</strong><br>
Any information that directly, indirectly, or in connection with other information — including a personal identification number— allows for the identification or identifiability of a natural person (in other words, you).</p>
<p><strong>Usage data</strong><br>
Usage data is information automatically collected through this website or third-party services, including your IP address, browser type, operating system, time and method of requests, response status, visit duration, page sequence, and device-specific details.</p>
<p><strong>This website</strong><br>
The means by which your personal data is collected and processed.</p>
<p><strong>Service</strong><br>
The service provided by this website as described in the Terms of Service and on this site.</p>
<p><strong>European Union (or EU)</strong><br>
Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.</p>
<p><strong>Cookie</strong><br>
Cookies are trackers consisting of small sets of data stored in your browser.</p>
<p><strong>Tracker</strong><br>
Tracker indicates any technology - e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of you, for example by accessing or storing information on your device.</p>
<p><strong>Legal information</strong><br>
This privacy statement has been prepared based on provisions of multiple legislations. This privacy policy relates solely to this website, if not stated otherwise within this document.</p>

Cookie policy template (Word DOCX)

Cookie policy template (PDF)

Do I need a cookie policy template on my website in UK?

In the United Kingdom, the use of cookies and trackers is regulated by the Privacy and Electronic Communications Regulations (PECR).

PECR states that websites that use tracking technologies must provide ‘clear and comprehensive information’ about this use, in the same way they do when they process users’ personal data.

The information must include what storage and access technologies you use, why you use them, whether any third parties either store or access information in the user’s device, or receive this information, and how long you intend to store or access information.

This is the exact information contained in a cookie policy. So if you’re based in the UK, you can either choose to have a cookie policy, or a specific section of your privacy policy dedicated to tracking technologies and cookies.

Examples of cookie policies

Looking for a cookie policy example? Here are cookie policy examples from well-known companies, showing how the required elements come together.

iubenda cookie policy example

Click on the button to view the cookie policy page:

Tesco cookie policy example

The image below shows both Tesco’s cookie banner at the top (that links to the policy) and their privacy and cookies policy. It’s quite condensed, but Tesco uses sections in a question format to make it more understandable to users. See it for yourself at this link.

Meta cookie policy example

Meta’s cookie policy page is accessible from their “Privacy Center”, with other legal documents. To make the page more readable, they included clickable sections that open a modal window for the user to learn more. It also allows viewing a printable version or the previous versions. Overall, the page is quite short.

Vodafone cookie policy example

The Vodafone website cookie policy example below shows a single menu without any extra text. Visitors can just click on the section that they wish to check. Under “How we use cookies”, Vodafone added a table to list the cookies they use and details like name and duration.

Where do I display my cookie policy page?

Displaying your cookie policy prominently on your website helps you meet privacy regulations and stay transparent with your visitors. It’s always best practice to link to it whenever you’re talking about cookies or asking for/managing cookie consent.

That’s why your website’s footer is a recommended place to display your document since it makes it accessible from any page.

You’re also required to link to your cookie policy in your cookie banner, which you should display at the user’s first visit on your site to ask for their consent.

It is common practice to include your cookie policy page within your privacy policy page. Overall, it’s best to have all your legal documents together under “Legal” or “Privacy”, as you can see from the cookies policies examples above.