A cookie policy is a standalone reference page that lists the cookies and similar technologies your product uses, what each one is for, how long it lasts, and how visitors can control them. For a WordPress Plugin, getting it right matters: WordPress.org guidelines require plugins to disclose any data they send to external services, and many plugins must help site owners meet their own GDPR duties. This free cookie policy generator asks a few questions about your WordPress Plugin and assembles a tailored document you can copy or download in seconds.
Why your WordPress Plugin needs a cookie policy
Under the GDPR, the ePrivacy rules, and laws like the CCPA you must disclose the cookies you set and, for non-essential ones, obtain consent. A cookie policy is where you document them in full and link to from your banner.
WordPress.org guidelines require plugins to disclose any data they send to external services, and many plugins must help site owners meet their own GDPR duties.
What a WordPress Plugin cookie policy should cover
A good cookie policy for a WordPress Plugin is specific to how your product works. At a minimum, address:
- Any calls the plugin makes to external or third-party services
- Data stored in the site database on behalf of the owner
- Hooks you provide for data export and erasure requests
- Each cookie or category, its purpose, and how long it lasts
- First-party versus third-party cookies and the providers behind them
- How visitors accept, reject, or withdraw consent
- A link back from your cookie banner to this policy
How this generator works
PolicySmith builds your cookie policy entirely in your browser — nothing you type is sent to a server. Answer the questions above about analytics, payments, AI features, and the regions your users live in, and the document updates to match. Export it as HTML or Markdown, paste it into your WordPress Plugin, and link to it from your store listing or footer.
Frequently asked questions
Does a WordPress plugin need its own privacy policy?
If your plugin sends data to your servers or a third-party API, you must disclose it in the readme and your policy. Plugins that store personal data should also support WordPress’s privacy export and erasure tools.
What is the difference between a cookie policy and a cookie banner?
The banner is the short consent notice shown when someone arrives; the cookie policy is the full reference page it links to, listing every cookie and its purpose.
Do I need a cookie policy if I only use essential cookies?
Strictly necessary cookies do not require consent, but disclosing them is still good practice. A short cookie policy alongside your privacy policy covers it.
Related generators