ePrivacy Directive (Art. 5(3)) • GDPR (Art. 6 & 7)
4-Step Guided Questionnaire

GDPR & ePrivacy Cookie Policy Generator

Create an authoritative, legally compliant Cookie Policy tailored to your website's tracking scripts, consent management platform (CMP), and third-party vendors. Export ready-to-publish plain text, HTML, and print-ready PDF.

Statutory EU Privacy Law: Under European Court of Justice (CJEU) jurisprudence (Planet49 case) and EDPB guidelines, non-essential cookies require prior, active, informed consent before firing. Your Cookie Policy must detail each cookie category, legal basis, active vendors, and consent revocation mechanisms.

4-Step Questionnaire

Step 1: Website & CMP Details

Provide the legal entity and consent management platform operating on your website.

The web domain where this policy is published (e.g. website.com or shop.mybrand.eu).
Legal business name responsible for data processing (e.g. Acme International GmbH).
The tool or banner deployed to capture visitor choices (e.g. Cookiebot, Usercentrics, Complianz, Custom).

Step 2: Cookie Categories in Use

Select the categories of cookies deployed on your website:

Step 3: Third-Party Cookie Providers

Select active third-party script providers setting cookies on your website:

Add any other custom vendors separated by commas (e.g. Hotjar, Hubspot, Criteo, Zendesk).

Step 4: Consent Management & User Control

Can users modify or revoke consent at any time via an on-screen widget link?

GDPR Art. 7(3) Recommendation: The GDPR strictly mandates that withdrawing consent must be as easy for the user as giving it. Providing a persistent footer link or widget to reopen your CMP satisfies European Data Protection Board (EDPB) compliance guidelines.
Live Document Preview
Statutory Cookie Disclosure Notice ePrivacy Directive & GDPR Compliant

COOKIE POLICY

Last Updated
September 27, 2026
Website Domain
website.com
Controller
Acme International Ltd
CMP Engine
Custom Consent Manager

1. What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work efficiently, enhance user experience, and provide analytical information to website operators.

2. Legal Basis & Consent

Under Article 5(3) of the ePrivacy Directive and Article 6(1) of the GDPR, we store and access cookies on your device based on the following legal grounds:

  • Strictly Necessary Cookies: Processed based on our Legitimate Interest (Art. 6(1)(f) GDPR) to deliver secure and operational website functionality.
  • Non-Essential Cookies (Analytics, Functional, Marketing): Processed exclusively upon receiving your explicit, prior Consent (Art. 6(1)(a) GDPR) provided through our Consent Management Platform.

3. Categories of Cookies We Use

4. Third-Party Cookies & Tracking Scripts

Depending on your consent choices, third-party service providers may place cookies on your device when you interact with our website. Third-party vendors operating on our site include:

Please note that third-party cookie providers process data independently according to their respective privacy and cookie policies.

5. Managing and Revoking Cookie Consent

6. Updates to This Cookie Policy

We may update this Cookie Policy periodically to reflect changes in technical implementations, legal requirements, or operational tracking tools.

Key Requirements Under EU Cookie & Privacy Laws

Essential legal requirements for website operators, e-commerce stores, and digital publishers in the European Union.

Article 5(3) ePrivacy Directive

Storing or accessing information on a subscriber's terminal equipment is only permissible if the user has given informed consent, with exemptions strictly limited to technical transmission or essential delivery of requested services.

Prior Explicit Consent (CJEU Planet49)

Consent must be freely given, specific, informed, and unambiguous. Pre-ticked boxes or assumption of consent via scrolling/browsing are legally invalid under EU Case C-673/17.

Easy Withdrawal (GDPR Art. 7(3))

Data subjects have the right to withdraw their consent at any time. It must be as easy to withdraw as it was to give consent, meaning an accessible footer button or widget must remain available.

Text copied to clipboard!

Book a 30-Minutes
Consultation

Speak directly with a compliance specialist. In this one-on-one call