A cookie policy is not a cookie banner
Two separate things are needed in the EU and UK. The banner is the consent mechanism that must block non-essential cookies until the visitor agrees; the cookie policy is the document listing what those cookies are. Publishing the policy without the banner leaves the actual consent requirement unmet.
- Strictly necessary cookies — sessions, load balancing, security
- Preference cookies — language, region, saved settings
- Analytics cookies, named per provider with retention
- Advertising cookies and the partners that set them
- How to withdraw consent later, and browser-level controls