CA-C-000782
Canva — Canva Privacy Policy
Entity
Date detected
May 1, 2026
Effective date
May 1, 2026
Severity
Low
Direction
Negative
Affected users
all users eu users uk users
Taxonomy
Transparency removal
Changes
−3 sentences removed · 1 sentence modified
Share 𝕏 Share in Share 🔒 PDF
🔔 Get alerted when Canva changes their policies.
Watcher — $9.99/mo Professional →

What Changed

Canva removed the cookie consent banner from the top of their Privacy Policy page on May 1, 2026. Previously, the page displayed a prompt asking users to accept optional cookies for personalization, advertising, and analytics, with options to accept or manage preferences. Now that banner is gone, meaning users are no longer presented with that choice upfront when visiting the Privacy Policy page.

Consumer Impact (what this means for users)

Canva removed the cookie consent banner that previously appeared on the Privacy Policy page, which allowed users to accept all cookies or manage their preferences for personalization and advertising. This means the upfront, visible mechanism for opting into or out of optional cookies is no longer presented on that page. You can still review Canva's cookie policy directly and adjust your browser or account settings to manage cookie preferences.

Obligation Changes (what shifted)

1
Protection removed
Consumers Removed

Users can no longer see or interact with a cookie preference prompt when visiting the Privacy Policy page, reducing the visibility of their cookie choices.

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
DMCA
United States Federal
DSA
European Union
GDPR
European Union
UK GDPR
United Kingdom

Why It Matters (compliance & risk perspective)

The removal of the cookie consent banner means users visiting Canva's Privacy Policy page are no longer presented with a clear, upfront choice about optional tracking and advertising cookies. This reduces transparency and may signal a change in how Canva collects consent for non-essential data processing.

Key Clauses Affected

Cookie Consent Banner

The accept/manage cookie consent prompt was removed from the Privacy Policy page, eliminating a visible mechanism for users to control optional cookie preferences on that page.

Optional Cookie Disclosure

Language disclosing that Canva uses optional cookies for personalisation, advertising, and analytics was removed from this page.

Full clause-by-clause analysis available with Watcher.

Evidence Verification

✓ Verified
Previous Version
98470430e580a5e5f7c4936aa83f8a082551fdf50903678edb959724b8a29699
April 21, 2026 06:16 UTC
✓ Verified
Current Version
56d732ffb72c63006e6f7f27fe8643f663dc65ac0438d53c648fcf66ed0e8167
May 1, 2026 16:19 UTC
✓ Verified
Change Detected
May 1, 2026 16:19 UTC
✓ Verified
Source Document
https://www.canva.com/policies/privacy-policy/
How to Cite
ConductAtlas Policy Archive
Entity: Canva | Document: Canva Privacy Policy | Record: CA-C-000782
Captured: 2026-05-01 16:19:02 UTC
URL: https://conductatlas.com/change/2026-05-01-canva-canva-privacy-policy-782/
Accessed: May 2, 2026

Unlock the full analysis

Institutional analysis Clause breakdown Document redline Citation export
Watcher — $9.99/mo Professional — $149/mo

14-day free trial available.

Institutional Analysis (Compliance & legal intelligence)

Assessment

Canva removed the cookie consent banner (accept/manage prompt) from its Privacy Policy page as of May 1, 2026. This touches cookie consent obligations under GDPR Art. 4(11) and Art. 7, the ePrivacy Directive, UK PECR, and similar frameworks requiring freely given, informed, and specific consent before non-essential cookies are set. If the consent mechanism has been removed rather than relocated, this is a compliance gap requiring immediate attention. If it has been moved elsewhere in the user journey, that relocation must be verified to still meet 'prior to processing' requirements. Action required: confirm where the consent mechanism now lives in the user flow.

Regulatory Exposure

1. GDPR Art. 4(11), Art. 7, Art. 13 — Consent must be freely given, specific, informed, and unambiguous; removal of a visible consent mechanism raises questions about lawful basis for non-essential cookie processing.

🔒

Compliance intelligence locked

Obligation analysis, escalation trigger, board language, and recommended action.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations + obligations. Professional: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-000782.

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Unlock full diff — Watcher $9.99/mo

Document Context

Document
Canva Privacy Policy
Entity
Canva
Captured
May 1, 2026
Source URL
https://www.canva.com/policies/privacy-policy/
More from Canva
May 1, 2026 Low
Canva Terms of Use

Canva removed a cookie consent banner from the introductory section of their Terms of Use page. Previously, the page displayed …

Apr 21, 2026 Low
Canva Privacy Policy

Canva updated their Privacy Policy on April 21, 2026, with a minor change to the navigation menu on their website. …

Apr 21, 2026 Low
Canva Terms of Use

Canva updated their Terms of Use navigation menu on April 21, 2026 by adding new product labels such as 'Latest …

Stay ahead of policy changes

We monitor 200+ platforms and archive every change — verified and timestamped.