Canva removed three sentences from its privacy policy that described optional cookie uses and prompted users to accept or manage cookie preferences. The removed text explained that Canva uses non-essential cookies to personalize visits, tailor ads, and analyze website performance, and directed users to a separate cookie policy. The updated policy no longer includes this cookie consent disclosure or the associated management options on the privacy policy page.
The updated privacy policy no longer explicitly discloses optional cookie uses or provides cookie preference controls on the privacy policy page itself. Previously, Canva stated it would use non-essential cookies for personalization, ad targeting, and analytics only if users accepted, and offered 'Accept all cookies' and 'Manage cookies' options. The removal of this disclosure and consent mechanism may affect how users understand cookie practices and when consent is obtained. Users who previously accessed cookie preferences through the privacy policy will need to locate these controls elsewhere on the Canva platform if they remain available.
This change removes explicit disclosure of cookie practices and user consent controls from Canva's privacy policy. The updated terms no longer state how non-essential cookies are used or direct users to manage preferences, which may affect transparency and compliance with cookie consent regulations in jurisdictions such as the EU and UK. Users and organizations relying on the privacy policy as the source of cookie information will no longer find this disclosure there.
→ Contact Canva support to locate current cookie preference controls if they have been moved to another location on the platform
→ Users will not see cookie consent or preference disclosures on the privacy policy page
→ The relationship between cookie practices and user consent becomes less transparent through the privacy policy
This is the 2nd significant Transparency Removal change Canva has made since ConductAtlas began monitoring.
Across all monitored documents, Canva has made 2 significant changes.
2 of Canva's significant changes have been classified as negative for consumers.
Removed language describing non-essential cookie uses and user preference controls.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Users can no longer review cookie uses or express preferences through the privacy policy page.
Canva removed explicit cookie consent disclosure and user preference controls from its published privacy policy. This change may create compliance risk under GDPR, UK PECR, ePrivacy Directive, and similar frameworks that require explicit, informed consent for non-essential cookies prior to placement. The removal does not necessarily indicate that cookie practices have changed, but it may affect how consent is documented and demonstrated to regulators. Organizations relying on Canva's compliance posture for their own vendor risk assessments or processing agreements should verify whether Canva has relocated these controls to another part of its platform or consent flow, as cookie consent requirements remain binding under applicable law regardless of policy disclosure.
GDPR (Articles 4, 7, and implied Article 82 consent requirements), UK PECR (electronic communications privacy), ePrivacy Directive (2009/136/EC), CCPA (as it may apply to Canva's California users), EU ePrivacy Directive
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Watcher: regulatory citations + obligations. Professional: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001543.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — WatcherCanva removed three sentences from its privacy policy that described cookie usage and consent options. The removed language previously explained …
Canva removed three sentences from its Terms of Use that previously explained cookie usage and offered consent options. The removed …
Canva added a cookie consent notice to the top of its Privacy Policy on May 5, 2026. The new language …
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.