cookie-consent-policy

name	cookie-consent-policy
title	Cookie Consent Banner and Policy
description	Drafts publication-ready cookie policies, banner copy, and consent-flow language under GDPR/ePrivacy, CCPA/CPRA, and major U.S. state privacy laws. Converts a verified cookie inventory into enforceable policy sections with lawful-basis mapping, granular opt-in controls, withdrawal mechanics, and user-rights handling. Use when asked for cookie policy, cookie banner, tracking notice, consent management, do-not-sell notice, or privacy rights messaging.
author	CaseMark
author_url	https://github.com/CaseMark/skills/tree/main/skills/legal/cookie-consent-policy
license	Apache-2.0
version	0.1.0
execution_mode	open
jurisdiction	cross-jurisdiction
practice	data-protection
language	en
tags	["drafting","memo","regulatory"]

Cookie Consent Banner and Policy

Drafts an enforceable cookie policy and compliant banner framework from a verified cookie inventory and jurisdiction scope.

Prerequisites

1. Site inventory — all domains, subdomains, in-app endpoints
2. Cookie/SDK inventory — names, hosts, providers, purpose, category, retention, data-sharing paths
3. Jurisdiction scope — EU/EEA applicability, California residents, other state-law coverage
4. Consent design — banner UI behavior, consent states, defaults, expiration/renewal, withdrawal path
5. Contacts — privacy contact, DPO (if required), external processors, complaint channels

Step 1: Collect Inputs

Gather all inputs; apply and label defaults if user says "use defaults."

Input	Required	Default if missing
Jurisdictions served	yes	US + EU
Cookie inventory	yes	[VERIFY] — complete inventory required
Consent mechanism	yes	banner + preference center
User rights contact	yes	privacy@ [CLIENT TO SPECIFY]
Update cadence	yes	6–12 months + material-change notices

Step 2: Draft Policy Sections

Generate in this order:

Section	Mandatory fields	EU/US notes
Purpose & scope	organization, websites, users affected, last-updated date	include EEA processing basis and non-EU logic
What are cookies	definition + non-cookie trackers (pixels, web beacons, local storage)	examples required
Cookie categories	strict table by category (see Step 3)	essential cookies exempt from consent where lawful
How we use cookies	purpose + legal basis + processors/recipients	map each non-essential use to explicit consent
Your choices	accept all / reject non-essential / customize	no bundling consent with account creation