Get a cookie policy that writes itself

Written for Cookie Rocks 2.9.14, checked on 5 November 2026. The current version is 2.11.2: some details may have changed.

This guide is for site owners who need a cookie policy and do not want to write or update it by hand. Cookie Rocks writes it from the cookies really found on your pages.

You need: Cookie Rocks Audit (free). It works with the cookie plugin you already use.

Steps

1. Open Cookie Rocks, then Cookies, and click Scan my pages. The policy lists what this scan finds.
2. Open Obligations. If you have not answered its four questions yet, do it first. At the point A cookie policy, click Create the page. Cookie Rocks creates a draft page called “Cookie policy”, with the shortcode [cookie_rocks_policy] in it, and opens it in the editor.
3. Read the page in the preview, add a sentence of your own if you wish, then click Publish.
4. Open Consent. Cookie Rocks finds a published page with the shortcode by itself. To be sure, choose it under Your policies, in Cookie policy page, then click Save Changes.
5. On the same screen, check Visitor accounts. If visitors can sign in to your site (customer accounts, members, courses), the policy lists the WordPress sign-in cookies.
6. Add a link to the page in your footer, next to your privacy policy.

You may also put the shortcode in an existing page yourself, for example inside your privacy policy. The result is the same.

What the policy contains

• A short introduction, and how long the visitor’s choice is kept, when Cookie Rocks can read it in your banner.
• A Manage cookies button, at the top and at the bottom, when it can reopen your banner.
• One section per category of cookies used on your site, such as statistics or marketing, with a card per tool: what the tool does, one short sentence about its cookies, and a link to the privacy policy of its company.
• The names and durations of the cookies, under Names and durations in each card. What a tool stores in the browser opens under Names. Visitors see a short page first, and the full list on demand.
• The categories your site does not use, in one line.
• A link to your privacy policy, and the date of the last analysis. With Cookie Rocks Pro, also the date of the last change.

Under Your policies, the setting Credit adds a thin frame at the bottom of the policy, with one sentence: the policy is written by Cookie Rocks, a WordPress plugin. With the Audit alone, it is unticked by default. With a paid key it is ticked, and you can untick it; with a free Community key, or once a key has expired, it stays.Support Cookie Rocks: show a short credit at the bottom of the cookie policy to show it. It is off with the Audit alone, and on by default with Pro.

With some cookie plugins, the policy also shows a Manage cookies button that reopens their banner. The help text under Cookie policy page says whether it works with yours. If not, add the “Manage cookies” link of your banner to the page. More detail: Consent.

Next step: Prove consent if an authority asks