No, you do not need a separate cookie policy. However, laws such as the General Data Protection Regulation (GDPR) and the ePrivacy Directive require you to detail your cookie use in a document that’s available to users.
Many websites choose to outline their cookie use in a separate cookie policy that’s linked on their cookie consent banner or pop-up.