Cookie policy
A cookie policy is the page that lists the cookies and similar technologies a website uses, with their purpose, provider, lifetime and legal basis, and explains how visitors can change or withdraw their choices.The cookie policy is how a site meets the information half of the cookie rules. Article 5(3) of the ePrivacy Directive requires clear and comprehensive information before consent, and the Court of Justice said in Planet49 that it must include how long the cookies last and whether third parties can access them. Articles 13 and 14 of the GDPR add the identity of the controller, the purposes and legal basis, the recipients, transfers abroad, retention and the data subject's rights.
A good cookie policy contains: who is responsible and how to contact them; what cookies and similar technologies (local storage, pixels) are used, grouped by category; for each one its name, provider, purpose, lifetime and whether it is first or third party; the legal basis per category (strictly necessary, or consent); the third parties and where they process data; how to accept, refuse and withdraw, with a link that reopens the preferences center; and the date of the last update. Keep it in the languages of the audience and in sync with what the site actually sets, which is what a periodic scan is for.
Cookiequiet generates a cookie policy from the scan, with the cookie table filled from what it finds, in English and French, hosted or copied as Markdown or HTML. It is a template, not legal advice. See how to write a cookie policy and the cookie policy generator.