Skip to content

Template · COOKIE POLICY

Cookie policy · EU/EEA baseline

Per-cookie inventory + disclosure scaffold. Replace placeholders with your actual cookie inventory; do not deploy without counsel review.

Scope law ePrivacy Variables 6 to substitute Last reviewed
Editorial research — not legal advice

Template body

6 placeholders · 11 sections

Last reviewed: {{last_reviewed}}

This page lists every cookie, localStorage entry, and third-party tracker on {{site_domain}}.

A small text file stored by your browser. We treat localStorage, sessionStorage, IndexedDB, and any other terminal-equipment access as equivalent for purposes of this policy.

1. Strictly necessary (always active)

Name Purpose Domain Duration
{{session_cookie_name}} Authentication {{site_domain}} Session
cookie_consent Stores your consent choice {{site_domain}} 6 months
csrf_token Cross-site request forgery prevention {{site_domain}} Session

These cookies are essential for the site to function. We do not need consent under ePrivacy Art 5(3) for them.

Name Purpose Domain Duration Provider
_ga Distinguishes users {{site_domain}} 13 months Google Analytics 4
_ga_<container> Session state {{site_domain}} 13 months Google Analytics 4

{{marketing_cookies_table_or_none}}

{{personalization_cookies_table_or_none}}

Managing your preferences

  • Use the [Cookie settings](#cookie-settings) link in our footer to change your choices anytime.
  • Browser-level: Chrome, Firefox, Safari, Edge all allow per-site cookie blocking.
  • Opt out of Google Analytics: install the Google Analytics opt-out add-on or delete the _ga cookie.

Third-party opt-outs

  • Google Ads: https://adssettings.google.com
  • Meta (Facebook): https://www.facebook.com/settings?tab=ads
  • LinkedIn: https://www.linkedin.com/psettings/advertising
  • Network Advertising Initiative: https://optout.networkadvertising.org

Updates

We will update this list when we add or remove trackers. The "Last reviewed" date reflects the most recent change.

Contact

For questions about cookies: {{privacy_email}}.

Variables to substitute

Replace each {{token}} in the body before deploying.

VariableType
{{site_domain}} string
{{last_reviewed}} date
{{privacy_email}} string
{{session_cookie_name}} string
{{marketing_cookies_table_or_none}} string
{{personalization_cookies_table_or_none}} string
How to use this template · Methodology

Adapt, then deploy. Editorial reading as of 2026-05-05; not legal advice. This template is a starting point — drafted against the named statute and the relevant regulator's published guidance, not your specific facts.

Substitute every placeholder. Tokens like {{controller_name}} must be replaced with your concrete values. Leaving placeholders unsubstituted is a recurring failure mode in published compliance documents; reviewers and regulators tend to read partially-completed disclosures as a documentation problem in itself.

Verify the assumptions. The "Assumes" block above lists the prerequisites we drafted against. If your facts differ — different processor list, different audience, different sub-processors — adapt the template, don't deploy it as-is.

Counsel review before going live. Templates are scaffolding, not finished artefacts. Route the final pass through counsel admitted in the jurisdiction where you operate.

Full methodology → · All templates → · Scope law: ePrivacy →

Editorial research, not legal advice. SetupAnalytics is a free, ad-free public utility maintained by independent editors. This template does not establish a lawyer-client relationship and is not warranted for accuracy or currency. Consult qualified counsel admitted in the relevant jurisdiction for any specific deployment. Report an inaccuracy →