diff --git a/conf/template_settings.py b/conf/template_settings.py
index 0cafdf0a..d822775f 100644
--- a/conf/template_settings.py
+++ b/conf/template_settings.py
@@ -62,6 +62,7 @@
                 "django.contrib.auth.context_processors.auth",
                 "django.contrib.messages.context_processors.messages",
                 "docs.utils.context_processors.docs_current_path",
+                "core.utils.generic_functions.cookie_consent",
             ],
         },
     },
diff --git a/core/config.py b/core/config.py
index 975badb7..87404ccc 100644
--- a/core/config.py
+++ b/core/config.py
@@ -161,3 +161,8 @@
     "Submitter": "submitting_institution",
     "Collector": "lab_code_1",
 }
+
+# Cookie consent
+COOKIE_CONSENT_NAME = "relecovCookieConsent"
+COOKIE_CONSENT_MAX_AGE = 60 * 60 * 24 * 365
+COOKIE_CONSENT_VALUES = {"all", "necessary_only"}
diff --git a/core/static/core/custom/css/cookie_consent.css b/core/static/core/custom/css/cookie_consent.css
new file mode 100644
index 00000000..98b8df30
--- /dev/null
+++ b/core/static/core/custom/css/cookie_consent.css
@@ -0,0 +1,259 @@
+.cookie-consent,
+.cookie-modal {
+    font-family: var(--font-primary);
+}
+
+.cookie-consent-hidden {
+    display: none !important;
+}
+
+.cookie-consent {
+    position: fixed;
+    right: 24px;
+    bottom: 24px;
+    left: 24px;
+    z-index: 1200;
+}
+
+.cookie-consent-content {
+    display: flex;
+    gap: 24px;
+    align-items: center;
+    max-width: 1180px;
+    margin: 0 auto;
+    padding: 24px;
+    color: var(--color-default);
+    background: var(--color-white);
+    border: 1px solid rgba(var(--color-secondary-rgb), 0.25);
+    border-radius: 8px;
+    box-shadow: 0 12px 40px rgba(var(--color-black-rgb), 0.22);
+}
+
+.cookie-consent h2,
+.cookie-modal h2 {
+    margin: 0 0 12px;
+    color: var(--color-primary);
+    font-weight: 700;
+}
+
+.cookie-consent p,
+.cookie-modal p {
+    margin: 0 0 10px;
+    line-height: 1.55;
+}
+
+.cookie-consent-actions,
+.cookie-modal-actions {
+    display: flex;
+    gap: 12px;
+    flex-shrink: 0;
+    justify-content: flex-end;
+}
+
+.cookie-consent-actions form,
+.cookie-modal-actions form {
+    margin: 0;
+}
+
+.cookie-btn {
+    display: inline-flex;
+    min-width: 128px;
+    min-height: 46px;
+    align-items: center;
+    justify-content: center;
+    padding: 11px 18px;
+    border: 1px solid var(--color-primary);
+    border-radius: 6px;
+    font-weight: 700;
+    text-align: center;
+    text-decoration: none;
+    transition: background-color 0.2s ease, color 0.2s ease, border-color 0.2s ease;
+}
+
+.cookie-btn-primary,
+.cookie-btn-secondary:hover,
+.cookie-btn-outline:hover {
+    color: var(--color-white);
+    background: var(--color-primary);
+}
+
+.cookie-btn-secondary {
+    color: var(--color-primary);
+    background: var(--color-secondary);
+}
+
+.cookie-btn-primary:hover,
+.cookie-btn-secondary:hover,
+.cookie-btn-outline:hover {
+    text-decoration: none;
+}
+
+.cookie-btn-outline {
+    color: var(--color-primary);
+    background: var(--color-white);
+}
+
+.cookie-modal .modal-dialog {
+    max-width: min(1170px, calc(100vw - 36px));
+}
+
+.cookie-modal-panel {
+    position: relative;
+    display: grid;
+    grid-template-columns: 38% 62%;
+    width: 100%;
+    min-height: 600px;
+    overflow: hidden;
+    background: var(--color-white);
+    border: 0;
+    border-radius: 6px;
+    box-shadow: 0 24px 70px rgba(var(--color-black-rgb), 0.35);
+}
+
+.cookie-modal-close {
+    position: absolute;
+    top: 0;
+    right: 0;
+    display: inline-flex;
+    width: 60px;
+    height: 60px;
+    align-items: center;
+    justify-content: center;
+    color: var(--color-white);
+    background: var(--color-primary);
+    border: 0;
+    border-bottom-left-radius: 30px;
+    font-size: 22px;
+    text-decoration: none;
+    z-index: 2;
+}
+
+.cookie-modal-sidebar {
+    padding: 44px 60px;
+    background: var(--color-white);
+}
+
+.cookie-modal-logo {
+    width: 150px;
+    height: auto;
+    margin-bottom: 28px;
+}
+
+.cookie-tab {
+    display: block;
+    width: 100%;
+    margin-bottom: 14px;
+    padding: 14px 20px;
+    color: var(--color-primary);
+    text-align: left;
+    text-decoration: none;
+    text-transform: uppercase;
+    background: var(--color-white);
+    border: 1px solid rgba(var(--color-secondary-rgb), 0.35);
+    border-radius: 5px;
+    font-weight: 700;
+}
+
+.cookie-tab:hover {
+    color: var(--color-primary);
+}
+
+.cookie-tab.active {
+    background: #f0f0f0;
+}
+
+.cookie-modal-body {
+    display: flex;
+    flex-direction: column;
+    padding: 44px 60px 38px;
+    background: #f7f7f7;
+}
+
+.cookie-tab-panel {
+    display: none;
+}
+
+.cookie-tab-panel.active {
+    display: block;
+}
+
+.cookie-table-wrapper {
+    margin-top: 20px;
+    overflow-x: auto;
+}
+
+.cookie-table {
+    width: 100%;
+    color: var(--color-default);
+    background: var(--color-white);
+    border-collapse: collapse;
+    font-size: 0.92rem;
+}
+
+.cookie-table th,
+.cookie-table td {
+    padding: 10px 12px;
+    border: 1px solid rgba(var(--color-secondary-rgb), 0.25);
+    text-align: left;
+    vertical-align: top;
+}
+
+.cookie-table th {
+    color: var(--color-primary);
+    font-weight: 700;
+}
+
+.cookie-toggle-row {
+    display: flex;
+    gap: 12px;
+    align-items: center;
+    margin-top: 24px;
+    color: #70b77e;
+}
+
+.cookie-toggle {
+    position: relative;
+    display: inline-block;
+    width: 52px;
+    height: 30px;
+    background: #8c8c8c;
+    border-radius: 999px;
+}
+
+.cookie-toggle::after {
+    position: absolute;
+    top: 2px;
+    right: 2px;
+    width: 26px;
+    height: 26px;
+    content: "";
+    background: var(--color-white);
+    border-radius: 50%;
+    box-shadow: 0 1px 4px rgba(var(--color-black-rgb), 0.3);
+}
+
+.cookie-modal-actions {
+    margin-top: auto;
+    padding-top: 32px;
+    border-top: 1px solid rgba(var(--color-gray-rgb), 0.35);
+}
+
+@media (max-width: 991px) {
+    .cookie-consent-content,
+    .cookie-consent-actions,
+    .cookie-modal-actions {
+        flex-direction: column;
+        align-items: stretch;
+    }
+
+    .cookie-modal-panel {
+        display: block;
+        max-height: calc(100vh - 36px);
+        overflow-y: auto;
+    }
+
+    .cookie-modal-sidebar,
+    .cookie-modal-body {
+        padding: 28px;
+    }
+}
diff --git a/core/static/core/custom/img/GDPR.jpg b/core/static/core/custom/img/GDPR.jpg
new file mode 100644
index 00000000..8be61b8e
Binary files /dev/null and b/core/static/core/custom/img/GDPR.jpg differ
diff --git a/core/templates/core/base.html b/core/templates/core/base.html
index 2c1acde1..b14f35b8 100644
--- a/core/templates/core/base.html
+++ b/core/templates/core/base.html
@@ -26,6 +26,7 @@
 
         <!-- Template Main CSS File -->
         <link href="{% static 'core/main_style/css/main.css' %}" rel="stylesheet">
+        <link href="{% static 'core/custom/css/cookie_consent.css' %}" rel="stylesheet">
         <style>
           table.dataTable thead tr:first-child th {
             position: relative;
@@ -132,6 +133,116 @@
 
                 {% endblock %}
 
+{% if show_cookie_banner %}
+<div id="cookieConsentBanner" class="cookie-consent" role="dialog" aria-live="polite" aria-labelledby="cookieConsentTitle">
+    <div class="cookie-consent-content">
+        <div>
+            <h2 id="cookieConsentTitle">Your privacy is important to us</h2>
+            <p>
+                We use strictly necessary first-party cookies for security, session management and the correct operation of this website. These cookies are associated only with the browser you are using.
+            </p>
+            <p>
+                If you select "Accept all", you accept strictly necessary cookies and any optional third-party or analytics cookies where they are used. If you select "Reject", only strictly necessary first-party cookies will be used. You can also manage your preferences. See the
+                <a href="{% url 'cookie_policy' %}">Cookie Policy</a>
+                and the
+                <a href="https://relecov.isciii.es/politica-de-privacidad/" target="_blank" rel="noopener noreferrer">Privacy Policy</a>.
+            </p>
+        </div>
+        <div class="cookie-consent-actions">
+            <form method="post" action="{% url 'cookie_consent' %}">
+                {% csrf_token %}
+                <input type="hidden" name="value" value="all">
+                <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                <button type="submit" class="cookie-btn cookie-btn-primary">Accept all</button>
+            </form>
+            <form method="post" action="{% url 'cookie_consent' %}">
+                {% csrf_token %}
+                <input type="hidden" name="value" value="necessary_only">
+                <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                <button type="submit" class="cookie-btn cookie-btn-secondary">Reject</button>
+            </form>
+            <button type="button" class="cookie-btn cookie-btn-outline" data-bs-toggle="modal" data-bs-target="#cookieSettingsModal">More information</button>
+        </div>
+    </div>
+</div>
+
+<div class="modal fade cookie-modal" id="cookieSettingsModal" tabindex="-1" aria-labelledby="cookieSettingsTitle" aria-hidden="true">
+    <div class="modal-dialog modal-xl modal-dialog-centered">
+        <div class="modal-content cookie-modal-panel">
+            <button type="button" class="cookie-modal-close" data-bs-dismiss="modal" aria-label="Close cookie settings">
+                <i class="bi bi-x-lg"></i>
+            </button>
+            <aside class="cookie-modal-sidebar" role="tablist" aria-label="Cookie settings sections">
+                <img src="{% static 'core/custom/img/GDPR.jpg' %}" alt="eu_gdpr_compliant" class="cookie-modal-logo">
+                <button type="button" class="cookie-tab active" id="cookiePrivacyTab" data-bs-toggle="tab" data-bs-target="#cookiePrivacyPanel" role="tab" aria-controls="cookiePrivacyPanel" aria-selected="true">Privacy overview</button>
+                <button type="button" class="cookie-tab" id="cookieNecessaryTab" data-bs-toggle="tab" data-bs-target="#cookieNecessaryPanel" role="tab" aria-controls="cookieNecessaryPanel" aria-selected="false">Strictly necessary cookies</button>
+            </aside>
+            <section class="cookie-modal-body tab-content">
+                <div class="cookie-tab-panel tab-pane fade show active" id="cookiePrivacyPanel" role="tabpanel" aria-labelledby="cookiePrivacyTab" tabindex="0">
+                    <h2 id="cookieSettingsTitle">Privacy overview</h2>
+                    <p>
+                        This website has a public area and an authenticated area. In both areas, strictly necessary first-party cookies may be used for security. In the authenticated area, a session cookie is also used to keep the user signed in. Optional third-party or analytics cookies are only allowed when the selected preference is "Accept all".
+                        <a href="{% url 'cookie_policy' %}">See the Cookie Policy</a>.
+                    </p>
+                </div>
+                <div class="cookie-tab-panel tab-pane fade" id="cookieNecessaryPanel" role="tabpanel" aria-labelledby="cookieNecessaryTab" tabindex="0">
+                    <h2>Strictly necessary cookies</h2>
+                    <p>
+                        These cookies are necessary for the website to function correctly and cannot be disabled in our systems. They are set in response to actions made by the user, such as saving cookie preferences, protecting forms, signing in, or keeping an authenticated session active.
+                    </p>
+                    <div class="cookie-table-wrapper">
+                        <table class="cookie-table">
+                            <thead>
+                                <tr>
+                                    <th>Name</th>
+                                    <th>Purpose</th>
+                                    <th>Area</th>
+                                </tr>
+                            </thead>
+                            <tbody>
+                                <tr>
+                                    <td>csrftoken</td>
+                                    <td>Protects forms and POST requests against cross-site request forgery.</td>
+                                    <td>Public and authenticated</td>
+                                </tr>
+                                <tr>
+                                    <td>relecovCookieConsent</td>
+                                    <td>Stores the user's cookie preference.</td>
+                                    <td>Public and authenticated</td>
+                                </tr>
+                                <tr>
+                                    <td>sessionid</td>
+                                    <td>Keeps the user signed in after login.</td>
+                                    <td>Authenticated only</td>
+                                </tr>
+                            </tbody>
+                        </table>
+                    </div>
+                    <div class="cookie-toggle-row">
+                        <span class="cookie-toggle" aria-hidden="true"></span>
+                        <strong>Enabled</strong>
+                    </div>
+                </div>
+                <div class="cookie-modal-actions">
+                    <form method="post" action="{% url 'cookie_consent' %}">
+                        {% csrf_token %}
+                        <input type="hidden" name="value" value="all">
+                        <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                        <button type="submit" class="cookie-btn cookie-btn-primary">Accept all</button>
+                    </form>
+                    <form method="post" action="{% url 'cookie_consent' %}">
+                        {% csrf_token %}
+                        <input type="hidden" name="value" value="necessary_only">
+                        <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                        <button type="submit" class="cookie-btn cookie-btn-secondary">Reject all</button>
+                    </form>
+                </div>
+            </section>
+        </div>
+    </div>
+</div>
+{% endif %}
+
         {% include "core/footer.html" %}
         <!--end Footer-->
 
@@ -149,5 +260,18 @@
         <!-- Template Main JS File -->
         <script src="{% static 'core/main_style/js/main.js' %}"></script>
 
+        <script>
+            const cookieSettingsModal = document.getElementById("cookieSettingsModal");
+            const cookieConsentBanner = document.getElementById("cookieConsentBanner");
+            if (cookieSettingsModal && cookieConsentBanner) {
+                cookieSettingsModal.addEventListener("show.bs.modal", function () {
+                    cookieConsentBanner.classList.add("cookie-consent-hidden");
+                });
+                cookieSettingsModal.addEventListener("hidden.bs.modal", function () {
+                    cookieConsentBanner.classList.remove("cookie-consent-hidden");
+                });
+            }
+        </script>
+
     </body>
 </html>
diff --git a/core/templates/core/cookiePolicy.html b/core/templates/core/cookiePolicy.html
new file mode 100644
index 00000000..97fbcbef
--- /dev/null
+++ b/core/templates/core/cookiePolicy.html
@@ -0,0 +1,113 @@
+{% extends "core/base.html" %}
+
+{% block content %}
+<section class="hero-animated d-flex font-primary">
+    <div class="container position-relative pt-5 pb-5">
+        <div class="row pt-4">
+            <div class="col-lg-10 mx-auto">
+                <h1>Cookie Policy</h1>
+                <p class="text-muted">Last updated: June 2026</p>
+
+                <p>
+                    This Cookie Policy explains how the RELECOV Platform uses cookies and similar technologies. The platform is operated by the Instituto de Salud Carlos III (ISCIII) for viral sequencing and variant evolution monitoring.
+                </p>
+
+                <h2>What Are Cookies?</h2>
+                <p>
+                    Cookies are small pieces of information stored in your browser when you visit a website. They can help a website work correctly, remember user actions or preferences, protect forms, or keep an authenticated session active.
+                </p>
+
+                <h2>Types Of Cookies</h2>
+                <p>
+                    Cookies may be classified by who manages them in:
+                </p>
+                <ul>
+                    <li><strong>First-party cookies:</strong> cookies set from the RELECOV Platform domain.</li>
+                    <li><strong>Third-party cookies:</strong> cookies set from a domain managed by another provider.</li>
+                </ul>
+                <p>
+                    According to how long they remain stored in:
+                </p>
+                <ul>
+                    <li><strong>Session cookies:</strong> cookies used while the user is accessing the service.</li>
+                    <li><strong>Persistent cookies:</strong> cookies stored for a defined period or until deleted by the user.</li>
+                </ul>
+                <p>
+                    According to their purpose:
+                </p>
+                <ul>
+                    <li><strong>Strictly necessary cookies:</strong> cookies required for security, session management, preference storage, or requested services.</li>
+                    <li><strong>Analytics cookies:</strong> cookies that may be used to understand how users interact with the website. The RELECOV Platform does not currently set optional analytics cookies through the consent banner.</li>
+                </ul>
+
+                <h2>Cookies Used By This Platform</h2>
+                <div class="table-responsive">
+                    <table class="table table-bordered align-middle">
+                        <thead>
+                            <tr>
+                                <th>Name</th>
+                                <th>Purpose</th>
+                                <th>Provider</th>
+                                <th>Retention</th>
+                                <th>Type</th>
+                            </tr>
+                        </thead>
+                        <tbody>
+                            <tr>
+                                <td><code>csrftoken</code></td>
+                                <td>Protects forms and POST requests against cross-site request forgery.</td>
+                                <td>RELECOV Platform</td>
+                                <td>Up to 1 year</td>
+                                <td>Strictly necessary</td>
+                            </tr>
+                            <tr>
+                                <td><code>relecovCookieConsent</code></td>
+                                <td>Stores the user's cookie preference.</td>
+                                <td>RELECOV Platform</td>
+                                <td>Up to 1 year</td>
+                                <td>Strictly necessary / preference</td>
+                            </tr>
+                            <tr>
+                                <td><code>sessionid</code></td>
+                                <td>Keeps authenticated users signed in while using the private area of the platform.</td>
+                                <td>RELECOV Platform</td>
+                                <td>Up to 15 days or until the user logs out.</td>
+                                <td>Strictly necessary</td>
+                            </tr>
+                        </tbody>
+                    </table>
+                </div>
+
+                <h2>Personal Data</h2>
+                <p>
+                    These cookies do not store directly readable personal information such as name, email address, or contact details. They are associated with the browser being used. In the authenticated area, the session cookie is used only to keep the user signed in.
+                </p>
+
+                <h2>Consent</h2>
+                <p>
+                    When you first visit the platform, a cookie notice is shown. If you select <strong>Accept</strong>, you accept strictly necessary cookies and any optional third-party or analytics cookies where they are used. If you select <strong>Reject all</strong>, only strictly necessary first-party cookies will be used.
+                </p>
+                <p>
+                    Strictly necessary cookies cannot be disabled from the platform because they are required for security, authentication, and requested services. You can delete or block cookies from your browser settings, although some parts of the platform may stop working correctly.
+                </p>
+
+                <h2>Third-Party Scripts</h2>
+                <p>
+                    Some authenticated pages may load third-party scripts or stylesheets to provide interactive spreadsheet or table functionality. These resources are scripts or stylesheets, not cookies by themselves. If a third-party provider were to set cookies in the future, those cookies should be reviewed and documented here.
+                </p>
+
+                <h2>How To Manage Cookies</h2>
+                <p>
+                    You can manage, delete, or block cookies through your browser settings. Blocking strictly necessary cookies may affect login, form submission, preference storage, or other essential features of the platform.
+                </p>
+
+                <h2>Privacy Policy</h2>
+                <p>
+                    For more information about privacy and data protection, please see the
+                    <a href="https://relecov.isciii.es/politica-de-privacidad/" target="_blank" rel="noopener noreferrer">Privacy Policy</a>.
+                </p>
+            </div>
+        </div>
+    </div>
+</section>
+{% endblock %}
diff --git a/core/tests.py b/core/tests.py
index 876a13ec..9368c27b 100644
--- a/core/tests.py
+++ b/core/tests.py
@@ -34,6 +34,7 @@
 import core.utils.schema
 import core.utils.variants
 from core.templatetags.user_groups import has_group
+from core.utils.generic_functions import cookie_consent
 from core.views import (
     _get_search_sample_rows_for_user,
     _get_sort_value,
@@ -5534,6 +5535,36 @@ def test_index_renders_sample_count_and_nextstrain_url(
             },
         )
 
+    def test_cookie_consent_context_shows_banner_without_cookie(self):
+        request = self.factory.get("/")
+
+        context = cookie_consent(request)
+
+        self.assertEqual(
+            context,
+            {
+                "show_cookie_banner": True,
+                "show_cookie_settings": False,
+                "cookie_settings_tab": "privacy",
+                "cookie_consent_next": "/metadataForm",
+            },
+        )
+
+    def test_cookie_consent_sets_necessary_only_cookie(self):
+        request = self.factory.post(
+            "/cookie-consent/",
+            {"value": "necessary_only", "next": "/"},
+        )
+
+        response = core.views.cookie_consent(request)
+
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response["Location"], "/")
+        consent_cookie = response.cookies["relecovCookieConsent"]
+        self.assertTrue(consent_cookie.value.startswith("necessary_only|"))
+        self.assertEqual(consent_cookie["max-age"], 60 * 60 * 24 * 365)
+        self.assertEqual(consent_cookie["samesite"], "Lax")
+
     @patch("core.views.redirect")
     def test_assign_samples_redirects_non_admin(self, redirect):
         request = self.factory.get("/assignSamples")
diff --git a/core/urls.py b/core/urls.py
index 109c5d4f..5283bf00 100644
--- a/core/urls.py
+++ b/core/urls.py
@@ -19,6 +19,8 @@
         name="assign_samples_to_user",
     ),
     path("Contact", core.views.contact, name="contact"),
+    path("cookie-consent/", core.views.cookie_consent, name="cookie_consent"),
+    path("cookie-policy/", core.views.cookie_policy, name="cookie_policy"),
     path("intranet/", core.views.intranet, name="intranet"),
     path(
         "laboratoryContact/",
diff --git a/core/utils/generic_functions.py b/core/utils/generic_functions.py
index c2e5c8ae..6515c56e 100644
--- a/core/utils/generic_functions.py
+++ b/core/utils/generic_functions.py
@@ -110,3 +110,13 @@ def get_user_role(user):
 def get_user_lab_field(user):
     user_group = get_user_role(user)
     return core.config.INSTITUTION_FIELD_MAPDICT.get(user_group)
+
+
+def cookie_consent(request):
+    has_cookie_consent = core.config.COOKIE_CONSENT_NAME in request.COOKIES
+    return {
+        "show_cookie_banner": not has_cookie_consent,
+        "show_cookie_settings": False,
+        "cookie_settings_tab": "privacy",
+        "cookie_consent_next": request.path,
+    }
diff --git a/core/views.py b/core/views.py
index e9cbe2e3..e7c4411c 100644
--- a/core/views.py
+++ b/core/views.py
@@ -6,6 +6,9 @@
 from django.http import JsonResponse
 from django.contrib.auth.decorators import login_required
 from django.contrib.auth.models import Group
+from django.utils import timezone
+from django.utils.http import url_has_allowed_host_and_scheme
+from django.views.decorators.http import require_POST
 
 # Local imports
 import core.models
@@ -120,6 +123,39 @@ def index(request):
     )
 
 
+def cookie_policy(request):
+    return render(request, "core/cookiePolicy.html")
+
+
+def _get_cookie_consent_redirect(request):
+    next_url = request.POST.get("next") or "/"
+    if url_has_allowed_host_and_scheme(
+        next_url,
+        allowed_hosts={request.get_host()},
+        require_https=request.is_secure(),
+    ):
+        return next_url
+    return "/"
+
+
+@require_POST
+def cookie_consent(request):
+    consent_value = request.POST.get("value")
+    if consent_value not in core.config.COOKIE_CONSENT_VALUES:
+        return JsonResponse({"ok": False, "error": "Invalid consent value"}, status=400)
+
+    response = redirect(_get_cookie_consent_redirect(request))
+    response.set_cookie(
+        core.config.COOKIE_CONSENT_NAME,
+        f"{consent_value}|{timezone.now().isoformat()}",
+        max_age=core.config.COOKIE_CONSENT_MAX_AGE,
+        path="/",
+        samesite="Lax",
+        secure=request.is_secure(),
+    )
+    return response
+
+
 @login_required
 def assign_samples_to_user(request):
     if request.user.username != "admin":
diff --git a/docs/markdown_files/index.md b/docs/markdown_files/index.md
index ea2978a0..8b771bcc 100644
--- a/docs/markdown_files/index.md
+++ b/docs/markdown_files/index.md
@@ -38,3 +38,7 @@
 
 - **FAQs**
     - [Create new users](create_new_user.md)
+
+- **Legal**
+    - [Cookie Policy](/cookie-policy/)
+
diff --git a/docs/templates/docs/documentationSideBar.html b/docs/templates/docs/documentationSideBar.html
index fa18107f..f817bd38 100644
--- a/docs/templates/docs/documentationSideBar.html
+++ b/docs/templates/docs/documentationSideBar.html
@@ -183,6 +183,19 @@
         </a>
     </li>
 
+    <br>
+    <!-- Divider -->
+    <hr class="sidebar-divider">
+    <div class="sidebar-heading">
+        <i class="bi bi-shield-check"></i> Legal
+    </div>
+    <li class="nav-item {% if '/cookie-policy' in docs_current_path %}active{% endif %}">
+        <a class="nav-link" href="/cookie-policy/">
+            <i class="bi bi-shield-lock"></i>
+            <span>Cookie Policy</span>
+        </a>
+    </li>
+
     <!-- Sidebar Toggler (Sidebar) -->
     <div class="text-center d-none d-md-inline">
         <button class="rounded-circle border-0" id="sidebarToggle">