Public

Your privacy policy, read point by point

a second pair of eyes

You write it, and Cookie Rocks points out what may be missing, point by point, with a text to copy.

Everything is in the free Audit

Cookie Rocks reads your privacy policy page and looks for what it should contain, according to your settings and the tools of your site. It works straight away, before you answer a single question.

Each point is marked Found or To add
A missing point comes with a text to copy and a Copy button
The words in brackets are yours to fill in

It searches for words: a help to check, not a verdict.

Get the free Audit

How it works

Made for your site

not a generic checklist

The list follows your tools, your countries and your answers. A point appears when your setup calls for it.

The tools it found. It checks that your page names each tool found on your site, or links to your cookie policy.
Your countries. The text on complaints follows the places your site addresses. A representative or browser signals appear only when required.
Where data goes. Transfers and your hosting country appear when your tools or your answers call for it.
In each of your languages. It reads each published translation, with Polylang or WPML, and gives one list per language.

What it looks for

Who is responsible
How to contact you
Legal basis
How long you keep data
Visitors’ rights
Right to complain
Services and cookies
Transfers
Hosting country
Your representative
Browser privacy signals
How to change a choice
Date of the last update

What only you can do

Start from what you really doList your forms, your newsletter, your shop and your tools first. A copied policy describes someone else’s business.
Say who receives the dataYour host, your mail tool, your payment provider and the agency that runs your site, if they handle data for you. You can name them or give their type.
Choose the right e-mailA general address on your own domain: privacy@, gdpr@ or contact@. Not a personal address, and not a free mailbox.
Make sure it is readTwo people should have access to it. Use the same address in every language, and test it now and then. Requests have a deadline.

By country and big law

Each law asks for something a little different.

GDPRThe European Union, Iceland, Liechtenstein and Norway CCPACalifornia. Other US states have their own laws.LGPDBrazil Law 25Quebec A local representativeWhen your policy must name one Transfers to the USWhen your tools send data to the US

By kind of site

What your policy needs to mention depends on what your site does.

An online shopOrders, payment and delivery providers A SaaSAccounts, and the data your customers put in A business siteContact forms, maps and reviews Hosting and CDNWhere your host keeps the data

Start from a first draft

Gather these facts and copy our prompt into your AI tool. The prompt tells it to use only your facts and to end with a list of points to check.

Your company
Your privacy e-mail
Your countries
What you collect
Your tools
Durations

A draft from an AI is not legal advice. Read it again with your lawyer or legal adviser before you use it.

See the prompt

You help me write the privacy policy of my website.

My facts:
- Company: [legal name, address, registration number]
- Contact e-mail for privacy: [address]
- Website: [address]
- Countries of my visitors and customers: [list]
- What I collect, and why: [forms, newsletter, orders, accounts, statistics]
- Tools and providers: [host, mail tool, payment, analytics, web agency]
- How long I keep each kind of data: [durations]
- Why I may use each kind of data, if I know: [consent, contract, legal duty, legitimate interest]

Rules for you:
- Use only the facts I give you. Do not invent a company name, a tool, a country, a duration or a legal basis.
- If a fact is missing, write [TO COMPLETE] and list it at the end.
- Write in plain words, in short sentences.
- End with a list called "Points to check", with everything a lawyer should read again.

Your other documents

See them side by side

PublicCookie policyLists your cookies. Cookie Rocks writes it for you.InternalRecord of processingYour inventory of what you do with personal data.Kept on your siteProof of consentShows what each visitor chose, and when.InternalProcessor agreementSets out what your agency, host or mail tool may do with data.

30 days free

Try the complete plugin. Nothing breaks on day 31.

no card, no catch

Every feature, every update and support, for 30 days. Setting it up takes a few minutes; the month gives you time to get the purchase through your accounting.

During the trial: everything, including the full settings and the scans
After 30 days without a key: the banner, your visitors’ choices and your proofs of consent keep working
What waits for a key: most settings, updates and support

How the trial works, in detail

Get your trial key

Your e-mail and your site. Your key arrives as soon as you confirm your e-mail.