Skip to content

Laws covered

Cookie Rocks covers all of them. Tick one setting and each visitor gets the rules that apply to them, on your site, automatically.

The country is read on your own server: no visitor address goes to a third party. One setting, the whole world · Which documents do you need?

The big ones: European Union · United Kingdom · United States · Canada · Brazil

AlaskaAlabama (law in force from 1 May 2027)ArkansasArizonaCaliforniaColoradoConnecticutDistrict of ColumbiaDelawareFloridaGeorgiaHawaiiIowaIdahoIllinoisIndianaKansasKentuckyLouisiana (law in force from 1 January 2027)MassachusettsMarylandMaineMichiganMinnesotaMissouriMississippiMontanaNorth CarolinaNorth DakotaNebraskaNew HampshireNew JerseyNew MexicoNevadaNew YorkOhioOklahoma (law in force from 1 January 2027)OregonPennsylvaniaRhode IslandSouth CarolinaSouth DakotaTennesseeTexasUtahVirginiaVermont (law in force from 1 January 2028)WashingtonWisconsinWest VirginiaWyomingAlbertaBritish ColumbiaManitobaNew BrunswickNewfoundland and LabradorNova ScotiaNorthwest TerritoriesNunavutOntarioPrince Edward IslandQuébecSaskatchewanYukonFijiTanzaniaWestern SaharaKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChile (law in force from 1 December 2026)Dem. Rep. CongoSomaliaKenyaSudanChadHaitiDominican Rep.RussiaBahamasFalkland Is.NorwayGreenlandFrench Southern Lands: no resident populationTimor-LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaCôte d'IvoireGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African Rep.CongoGabonEq. GuineaZambiaMalawiMozambiqueeSwatiniAngolaBurundiIsraelLebanonMadagascarPalestineGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndia (law in force from 13 May 2027)BangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumNetherlandsPortugalSpainIrelandNew CaledoniaSolomon Is.New ZealandAustraliaSri Lanka (law in force from 1 January 2027)ChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguay (law in force from 27 November 2027)YemenSaudi ArabiaNorthern CyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliland (Somalia)UgandaRwandaBosnia and Herz.MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoS. SudanGaza (Palestine)Golan Heights (Syria)Kalapani–LipulekhCrimea (Ukraine)Shebaa Farms (Syria)East Jerusalem (Palestine)East Jerusalem (Palestine)AndorraAntigua and Barb.ArubaBarbadosBahrainBermudaCabo VerdeCuraçaoDominicaMicronesiaFaeroe Is.GrenadaGuernseyGibraltarHong KongIsle of ManJerseyKiribatiComorosSt. Kitts and NevisCayman Is.Saint LuciaLiechtensteinMonacoMarshall Is.MacaoMaltaMauritiusMaldivesNauruFr. PolynesiaPalauSeychellesSingaporeSan MarinoSão Tomé and PrincipeSint MaartenTongaTuvaluVaticanSt. Vin. and Gren.British Virgin Is.Samoa
  • Less strictStricter
  • Not yet studied
  • Disputed territory: no rules shown

Zoom with the buttons, a double click, a pinch or Ctrl and the wheel. Drag to move. Small countries are dots.

Occupied and disputed territories are shown as the United Nations sees them.

Equal Earth projection: every country at its true size.

How we score strictness

Each country gets a score from 0 to 100, from its rules in force today. Each rule counts from 0 (no rule) to 2 (the strictest rule), multiplied by its weight:

  • Prior consent or opt-out: weight 3
  • Rejecting as easy as accepting: weight 1
  • Withdrawing consent at any time: weight 1
  • Analytics without consent: weight 1
  • How long a choice lasts: weight 1
  • Cookie walls: weight 1
  • Proof of each choice: weight 1
  • Language of the banner: weight 0.5

A rule we have not studied yet is left out of the score instead of lowering it. A law already passed but not yet in force counts now, and the map shows its start date. Fines and enforcement are not part of the score: they measure the risk, not the rule. The age of a child’s consent is left out too, because in many countries it is simply the age of majority.

Data last checked: 7 November 2026. Source: our legal watch, from official texts.

Every country has its page

Asked firstFree to refuseInformed

States and provinces

Compare every rule in one table

Your country is not listed, your visitors come from everywhere, or your site is hosted abroad? The subtleties, in plain words.