Can I sell cotton candy as a home baker? Yes in Virginia, and in 45 states, with one big split

Virginia: yes, named, no permit

VDACS's Home Food Processing Exemptions FAQ (rev. July 2026) lists cotton candy under the low-risk foods in Va. Code § 3.2-5130(C)(3). That is the same exemption that covers baked goods, candies, popcorn and jam. For that exemption there is no VDACS permit, inspection or fee to apply for, and no sales cap for low-risk foods. (The caps people quote for Virginia belong to the acidified-foods and honey exemptions, not to cotton candy.)

The yes comes with four conditions, all from the same FAQ. Make it in your own private home, which is how the FAQ puts it. Label every package with your name, physical address or P.O. box, phone and date processed, plus the standard elements (product name, net weight, ingredients and allergens) and the statement “NOT FOR RESALE PROCESSED AND PREPARED WITHOUT STATE INSPECTION” on the front of the package. If a package is too small for an easily read label, or the cotton candy is sold to be eaten on site, the FAQ accepts a physical sign where it is sold, as long as the sign carries all the required information. (The statute itself names the too-small-package case.) Sell only direct to an individual in Virginia for their own consumption, by phone, online or at any location, delivered in person, by mail or by delivery service. Online orders and in-state mail/delivery are the HB 402 change, effective July 1, 2026. And never under this exemption for resale, consignment, use in a retail food establishment, sale to another business, or sale across state lines.

What “plain” means, and what breaks it

Plain cotton candy is spun sugar plus flavour and colour. That is the whole product, and it is why the cottage answer is usually yes: sugar does not support bacterial growth at room temperature, and nothing in the bag needs to stay cold. The moment you add a topping or filling that does need refrigeration (cream, custard, fresh fruit, cream-cheese frosting), the bag stops being plain non-TCS cotton candy and falls out of most cottage lists. If you want a topped version, that is a licensed-kitchen product, not a cottage tweak.

The split that matters more than the state: bagged at home vs spun live

Every verdict in the table below is about home production, prepackaged. Cottage exemptions require the food to be made in your own home kitchen. Spinning cotton candy at a market, fair or event is preparation away from home, so it is a different activity in most places, even in a yes state. It may need a temporary or mobile food permit for that event, or it may fall under a specific event exemption. Washington is the cleanest example of the second kind: WAC 246-215-08305 lists cotton candy as exempt-from-permit food at events, with an application in some counties. Other markets will simply ask for the temporary permit. Do not assume a table “yes” covers a live-spin stand. Ask the market and the local health department which route they want for on-site spinning before you bring the machine.

What the 50-state survey found

The named six

Virginia (VDACS FAQ, July 2026, § 3.2-5130(C)(3)) and California (CDPH Approved Cottage Foods List, October 2026, under Candy and Confections; Class A direct-only or Class B direct-plus-indirect through your county, 2026 caps $88,878 / $177,756) are the two most useful named listings, because both agencies publish the list itself. Georgia names it in Ga. Comp. R. & Regs. 40-7-19-.05 (“popcorn, popcorn balls, and cotton candy”). Michigan names it on MDARD's “What Can I Make” page, under confections and candies made without alcohol ($50,000 cap, direct sales only). Connecticut names it on the DCP generally-permissible list (popcorn / popcorn balls / cotton candy, $50,000 cap, cottage licence, in-state direct sales only). Maryland names it too, in the MDH Cottage Food Guidelines' allowable-snacks list, listed separately from the prohibited soft candies (caramel, fudge), so the soft-candy ban does not swallow it.

The three “no” states, and why they are different nos

Rhode Island: baked goods only

Rhode Island cottage manufacture (R.I. Gen. Laws § 21-27-6.2, $65 registration, $50,000 cap) is limited to non-refrigerated baked goods. Cotton candy is not baked, so it is not covered. The older farm home food manufacture statute covers candies, but only for farms. Everyone else needs a food processor licence for cotton candy in Rhode Island.

Wisconsin: baked goods only, by court order

Wisconsin's home-baker exception comes from the Kivirist court order, and it covers shelf-stable baked goods only. Crosodo's dataset notes the 2024 Court of Appeals ruling that unbaked non-potentially-hazardous items, including candies, remain subject to licensure. The “pickle bill” does not help: it covers home-canned pickles and acidified vegetables and fruits up to $5,000 a year, not spun sugar.

Missouri: explicitly prohibited under the statewide law

Missouri is the sharpest no in the table, because cotton candy is explicitly listed as prohibited under the statewide cottage statute, Mo. Rev. Stat. § 196.298, which covers baked goods, canned jams and jellies, and dried herbs. There is a separate individual-stands law in certain counties that allows most nonperishable foods at events, farmers markets and roadside stands, so a Missouri seller should check the county route, not quote the statewide law as a yes.

The two “confirm first” states

New York: candy is listed, cotton candy is not named

New York's Home Processor list includes candy (excluding chocolate) but does not name cotton candy, and Crosodo's dataset summarises New York as baked / kill-step products. Cotton candy is a sugar candy with no chocolate, so the candy category is a plausible fit, but the two sources point in different directions, so this survey does not call it a clean yes. Confirm with NYS Ag & Markets before selling. If confirmed, the path is registration, in-state sales only, and no stated sales cap.

Washington: cottage category vs event exemption

Washington's cottage categories are baked goods and baked / stovetop candies, and cotton candy is not named there. Separately, WAC 246-215-08305 lists cotton candy as exempt-from-permit food at events. Confirm which route covers prepackaged home sales versus event sales. The answer may legitimately be “cottage permit for the bags, event exemption for the stand,” and it may differ by county.

A Virginia starter checklist

• Spin and bag at home, in your own private home kitchen. Keep the live-spin machine for events where the market has told you which permit route it wants.
• Flavoured sugar only. No cream, custard, fresh fruit or other TCS toppings on the cottage version.
• Label every bag: your name, address or P.O. box, phone, date processed, product name, net weight, ingredients, plus “NOT FOR RESALE PROCESSED AND PREPARED WITHOUT STATE INSPECTION”.
• Sell direct to a Virginia individual for their own use. Online and in-state mail/delivery are allowed since July 1, 2026. No wholesale, no resale, no out-of-state shipping under the exemption.
• Do the Chesapeake home-occupation / business-licence check, and confirm the market's vendor rules, before your first market day.
• If a buyer asks for another state, check that state's row in the PDF first. The Virginia exemption does not travel.

How to cite

Suggested citation: Crosodo Research, Cotton Candy 2026 (November 2026), available at crosodo.com/reports/cotton-candy-2026.pdf. Caps and registration in the table are cottage-program values from Crosodo's May 2026 state dataset, cross-checked against the Farm-to-Consumer Legal Defense Fund map (July 30, 2026). Confirm the live agency page before you sell. Rules change, and a market can add a rule the state table does not show. This is not legal advice.