A cookie policy is a declaration to your users on what cookies are active on your website, what user data they track, for what purpose, and where in the world this data is sent. ... Cookies are a potential privacy risk, because they are able to track, store and share user behavior.