A cookie policy is a document that outlines a website's use of cookies and similar technologies, informing users about the types of cookies used, their purposes, and how users can manage or opt out of them. It's a legal requirement under data protection laws like GDPR and ePrivacy Directive to ensure transparency and obtain informed consent from users.