The short answer is YES! A cookie policy is absolutely necessary if your site uses cookies and your users are in a country with a cookie policy requirement (CCPA, GDPR, etc.). For instance, you need to comply with CCPA or GDPR if you have users in California or the European Union.