Cookie notice template

This page explains what a cookie notice is and is not, and gives a free excerpt of template wording.

What to know before using a notice

• The text lists cookies. It is not a consent banner. Where the law requires consent before non-essential cookies (for example in the EU), your site also needs a working mechanism that asks first and records the choice.
• GDPR Article 13 asks that people get plain-language information when data is collected: who you are, purposes, recipients and retention. Source: Regulation (EU) 2016/679 on EUR-Lex, read 2026-10-12 through a search-result summary; verify against the official article.
• California's notice at collection should list categories of personal information and purposes and link to the privacy policy. Source: California Attorney General, CCPA page, read 2026-10-12. Mention Global Privacy Control only if you really honor it.
• The notice must describe only cookies your site really sets. Scan your site and list what you find.

This page names no rejection reasons, because the sources read do not list any for cookie notices.

Free excerpt from the template

Four complete clauses, copyable as plain text. Replace every [[FIELD]].

1. What cookies are

Cookies are small files that a website stores in your browser. Similar technologies such as local storage work in the same way and are covered by this notice.

2. Essential cookies

These are needed for the site to work, for example to keep you logged in or remember a security setting. They do not need consent where the law treats them as strictly necessary.

[[ESSENTIAL_COOKIES_LIST]]

3. Analytics cookies

These help us understand how the site is used. They are set only if you allow them.

[[ANALYTICS_COOKIES_LIST]]

4. Your choices

[[CONSENT_MECHANISM]]

You can also block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site from working. Changing your choice later is as easy as giving it.

Keep clause 3 only if the site sets analytics cookies.

Fill-in checklist

• Scan the site and list each cookie and local-storage key with its purpose and lifetime.
• Sort them into essential, analytics and marketing.
• Describe the real consent mechanism, or state that only essential cookies are used.
• Link to your privacy policy at a public address.
• Update the notice whenever a script or tool is added.

The full editable pack (7 templates in Markdown, PDF and HTML) is being prepared.

Related: SaaS privacy policy template.