Websites that collect data from you when you access them are legally required to have a cookie policy in place. Laws such as the ePrivacy Directive and the General Data Protection Regulation (GDPR) require websites to disclose details of their use of cookies.