Cookie Policy Review
A structured review of your cookie policy against ePrivacy, PECR, GDPR, and CCPA.
- Same checklist a lawyer would use for a first pass
- Findings organised by section so you can act on them
- Quotes back the specific phrases that need to change
A lawyer review of a cookie policy is rarely worth its cost for a small business — the document is short, the rules are predictable, and most of the work is checking that the named cookies and third parties are accurate. Our automated review covers exactly that: structural completeness, consent disclosure, cookie categorization, third-party transparency, and internal consistency. It will not replace counsel for bespoke risk, but for the routine "is this cookie policy current" question it is a quick way to find out.
Grounded in real law, not training-data recall.
Structural completeness
Identity of controller, list of cookie categories, named third parties, consent mechanism, withdrawal mechanism, contact for complaints, effective date.
Consent disclosure (EU + UK)
Whether the consent mechanism is described, whether the policy explains how to withdraw or re-open preferences, whether non-essential cookies are gated behind consent.
CCPA / CPRA disclosure (US)
Whether the policy covers cross-context behavioral advertising, the "Do Not Sell or Share" opt-out, and the Global Privacy Control signal.
Per-cookie / per-third-party transparency
Whether specific cookies and third parties are named (best practice) or hidden behind generic categories like "analytics providers".
What you'll probably see in the report.
Generator-tool policies
Older cookie scanners often produced policies that have not been refreshed since GDPR Art. 7 consent guidance was tightened. Common missing items.
Lawyer-drafted, never updated
Correct in 2019, missing CPRA cookie-sharing rules and the EDPB consent dark-pattern guidance from 2022.
Conflict with the actual cookie banner
Policy says one thing, banner says another. Surfaces when both are present in the same document or visibly contradictory.
Ready to find the gaps in your cookie policy?
Paste a URL or your cookie policy text. Get a structured gap report plus a 0–100 compliance score in around 20 seconds. Free, no signup, no email.
Questions people ask before running the audit.
Other ways people audit their policies.
Run your audit now.
Free, structured, calibrated for SMBs. Paste your URL or text and get the report in seconds.