Free tool

A cookie table for your cookie policy.

Pick the tools your site uses, or enter an address and we tick the ones we find. Add your own cookies, and copy a table grouped by category as HTML or Markdown. Every vendor row comes from that vendor’s own documentation.

We fetch one page, read its HTML and the cookies its server sets, and tick the tools we recognise below. We don’t store the address or the result.

Step 1

Tick what your site uses

Each vendor comes with the cookies it documents. Some only appear with a certain setting, so they start unticked: open “Choose cookies” to check.

Analytics and recordings
Choose cookies

Google gives these as defaults. You can change the lifetime in your tag settings, and browsers can shorten it.

Choose cookies

Microsoft’s cookie list for Clarity gives no lifetimes, so the table says so.

Choose cookies

Hotjar sets these on your own domain. It gives no categories and says all of them must be allowed for Hotjar to work.

Advertising
Choose cookies

The conversion linker in the Google tag sets the _gcl_ cookies on your domain. IDE is Google’s ad cookie on doubleclick.net.

Choose cookies
Choose cookies

LinkedIn lists these among the cookies it sets on other sites, for its plugins, ads and tags together. It doesn’t publish a list for the Insight Tag alone.

Choose cookies

TikTok turns its first-party and third-party cookies on by default. You can switch them off in the pixel settings.

Choose cookies

Microsoft documents lifetimes for _uetmsclkid and MUID only.

Video embeds
Choose cookies

Google doesn’t say which of these the player sets in privacy-enhanced mode. We list the player under marketing because it comes from another company; Google itself calls YSC a security cookie and PREF a functionality cookie.

Choose cookies

With dnt=1, Vimeo says the player sets no new cookies except the bot checks, which it calls essential to running the player securely. Vimeo lists a few more for password-protected videos, webinars and registration forms.

Marketing, payments and hosting
Choose cookies

Categories as HubSpot gives them. HubSpot lists more for its own cookie banner, memberships and password-protected pages.

Choose cookies

Stripe calls these essential: they help prevent fraud on payments.

Choose cookies

Cloudflare calls its cookies strictly necessary for the services its customers use. Which ones appear depends on what you switched on, so tick only those.

Your own cookies

A login, a cart, a language setting: cookies your own site sets. They appear in the table with you as the provider.

    Step 2

    Your cookie table

    Grouped by category, as HTML or Markdown. Vendor details as each vendor documents them, checked on 28 October 2026.

    Preview

    Pick a tool above or add a cookie of your own, and the table appears here.

    HTML

    No classes or styles, so it takes on your site’s look. Paste it into your cookie or privacy page.

    <!-- Pick a tool or add a cookie of your own, and the table appears here. -->

    Markdown

    For a static site, a docs page or anything else that reads Markdown tables.

    <!-- Pick a tool or add a cookie of your own, and the table appears here. -->
    How to use it

    What a cookie table needs to say

    A cookie declaration, often a table on your cookie policy page, tells visitors what your site stores on their device and who receives the data. The ePrivacy Directive ties consent to clear information about the purposes. In Planet49 (2019), the EU’s Court of Justice added that visitors must be told how long cookies stay active and whether third parties can access them. That’s why each row here has a name, a provider with a link to its privacy page, a purpose and a retention period.

    Start with what your site loads. Enter an address and we check one page the way the cookie banner checker does: we fetch its HTML, read which tools it loads and which cookies its server sets, and tick what we recognise. Then go through the list yourself. A tag manager can load tools that aren’t in the HTML, and other pages can load different ones.

    Open “Choose cookies” under a vendor to see what that vendor documents. Cookies that only appear with a certain setting, such as Cloudflare’s bot protection or HubSpot’s chat, start unticked. Then add the cookies your own site sets, such as a login, a cart or a language choice, with a purpose in plain words.

    The table groups everything into necessary, preferences, statistics and marketing, the groups most banners use. The category is a starting point. Where a vendor names one, we follow it, and we put players and pixels from other companies under statistics or marketing. If your banner groups things differently, move the rows after you copy.

    Copy the HTML into your cookie page, or the Markdown into a static site. The HTML has no classes or styles, so it takes on your site’s look, and it doesn’t link to gatelamp.com. The guide What to put in a cookie policy covers the rest of the page, with a template.

    Every vendor row comes from that vendor’s own documentation, checked on 28 October 2026, with the sources below. Where a vendor doesn’t state a lifetime, the table says so. Vendors change names and lifetimes, so a table written once goes out of date. Gatelamp’scookie declaration will build it from what its scanner finds and keep it current.

    Sources

    Where each row comes from

    Only the vendors’ own pages, read on . A vendor whose cookies we couldn’t source isn’t in the list.

    Cookie declarations: common questions

    What should a cookie declaration list?
    For each cookie or similar item: its name, who sets it, what it’s for, how long it stays and which category of your banner it falls under, with a link to the provider’s privacy page. The guide on cookie policies on this site explains where those points come from. This is general information, not legal advice.
    Where does the vendor data come from?
    From each vendor’s own documentation, such as Google’s cookie pages, Microsoft Learn and HubSpot’s knowledge base. The page lists the sources for every vendor and the date we checked them. Where a vendor doesn’t state a lifetime, the table says so instead of guessing.
    Is the table complete for my site?
    Not on its own. It lists what vendors document, vendors change cookie names and lifetimes, and your setup can add cookies or leave some out. Check your live site: the cookie banner checker on this site reads one page, and your browser’s developer tools show every cookie a page sets.
    Do I need a cookie declaration without a banner?
    It helps. A site that needs no consent still stores or loads something, and France’s regulator, the CNIL, recommends telling visitors about cookies that don’t need consent too. A short table with the necessary ones is enough.
    What happens to the address I scan?
    Our server fetches that one page and sends the result to your browser, which ticks the tools it found. We don’t store the address or the result, and we don’t log them. To stop abuse, Cloudflare counts how many checks come from one IP address per minute.

    General information about the rules, not legal advice. A row that’s out of date? Tell us.

    Read and use next

    Where Gatelamp helps

    Early access

    Switch on early.

    Join the waitlist for Gatelamp. We invite people in small groups, and waitlist members get the early price.