A cookie policy is a document that lists all cookies and similar technologies used on a website and provides comprehensive information about each individual cookie. Neither the GDPR nor the ePrivacy Directive mandates the creation of a cookie policy. However, it can help you present your handling of cookies and similar technologies to your website visitors transparently and separately from your privacy policy.