Canva removed three sentences from its privacy policy cookie notice on May 14, 2026. The removed language disclosed that Canva uses cookies for personalizing ads, analyzing website performance, and tailoring content on partner sites, and directed users to learn more in the cookie policy. The policy also removed 'Accept all cookies' and 'Manage cookies' button options. The updated policy now states only that Canva uses essential cookies to make the service work, without disclosing non-essential cookie purposes or providing explicit cookie choice mechanisms in the privacy policy document itself.
The updated privacy policy no longer explicitly discloses that Canva uses cookies to personalize ads, analyze website performance, or tailor content on partner sites. Previously, the policy stated these purposes and directed users to the cookie policy for more information and choice. The revised policy now mentions only that essential cookies are used to make Canva work. This change removes transparency about non-essential cookie uses and eliminates the cookie consent interface (Accept all cookies / Manage cookies buttons) that was previously presented in the privacy policy document itself.
The removal of cookie purpose disclosure and choice mechanisms from the privacy policy may breach transparency and consent obligations under GDPR Article 13, CCPA, and UK PECR, which require services to clearly disclose the purposes of tracking cookies and provide users with accessible choice before those cookies are placed. The updated policy now discloses only that essential cookies are used to make Canva work, without explaining non-essential cookie purposes or providing a documented choice mechanism. If these disclosures and controls have not been relocated to another accessible, publicly available document, the privacy policy may no longer satisfy legal requirements to inform users about the scope and purpose of cookie tracking.
→ Non-essential cookie purposes that were previously disclosed in the privacy policy are no longer visible in that document; users cannot confirm the scope of cookie tracking from the updated policy.
→ Cookie choice buttons previously embedded in the privacy policy are no longer accessible in that location; if Canva has not relocated the choice mechanism to another accessible document, users may have limited ability to manage non-essential cookies.
This is the 5th significant Transparency Removal change Canva has made since ConductAtlas began monitoring.
ConductAtlas has recorded 3 material changes to this document (since May 2026). An additional minor or cosmetic changes were excluded.
Across all monitored documents, Canva has made 5 significant changes.
5 of Canva's significant changes have been classified as negative for consumers.
Removed language describing non-essential cookie uses for personalization, ad targeting, partner site tracking, and performance analysis.
Removed 'Accept all cookies' and 'Manage cookies' buttons previously presented in the privacy policy.
Removed reference directing users to 'Learn more about your choices in our cookie policy'.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Users can no longer see in the privacy policy what non-essential cookies do or access cookie choice buttons within the policy document.
Canva removed explicit disclosure of non-essential cookie purposes and user choice mechanisms from its privacy policy on May 14, 2026. Under GDPR Article 13 and CCPA Section 1798.140(ae), services must obtain informed consent before placing non-essential tracking cookies and must disclose the purposes of such tracking in privacy notices. Removing cookie purpose disclosures and choice UI from the main privacy policy may not comply with transparency and consent requirements if cookie tracking continues. UK PECR and ePrivacy Directive requirements similarly mandate prior consent and clear disclosure for non-essential cookies. A compliance review is warranted to confirm whether Canva's cookie consent mechanism has been moved to a separate cookie banner or policy document, and whether that mechanism satisfies applicable consent and disclosure standards.
GDPR Article 7 (consent conditions), Article 13 (transparency), EDPB Cookie Guidelines; CCPA Section 1798.100 (disclosure), Section 1798.115 (opt-out rights); UK PECR Regulation 6; ePrivacy Directive Article 5(3); FTC Act Section 5 (unfair or deceptive practices)
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Monitor: regulatory citations + obligations. Compliance: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002094.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — MonitorCanva's privacy policy page now displays a cookie banner before the main policy content. The update adds three sentences about …
On May 11, 2026, Canva added a cookie consent notice to its Terms of Use that was not present before. …
Canva's privacy policy footer was updated on May 11, 2026 to remove references to 'Magic Studio' and 'Windows Mac' from …
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the …
TikTok's data collection extends to device sensors, clipboard content, geolocation, and cross-site tracking. Here is what their Privacy Pol…
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.