We email you the diff and what it means, the day it happens.
Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Canva removed three sentences from its privacy policy cookie notice on May 14, 2026. The removed language disclosed that Canva uses cookies for personalizing ads, analyzing website performance, and tailoring content on partner sites, and directed users to learn more in the cookie policy. The policy also removed 'Accept all cookies' and 'Manage cookies' button options. The updated policy now states only that Canva uses essential cookies to make the service work, without disclosing non-essential cookie purposes or providing explicit cookie choice mechanisms in the privacy policy document itself.
The updated privacy policy no longer explicitly discloses that Canva uses cookies to personalize ads, analyze website performance, or tailor content on partner sites. Previously, the policy stated these purposes and directed users to the cookie policy for more information and choice. The revised policy now mentions only that essential cookies are used to make Canva work. This change removes transparency about non-essential cookie uses and eliminates the cookie consent interface (Accept all cookies / Manage cookies buttons) that was previously presented in the privacy policy document itself.
The removal of cookie purpose disclosure and choice mechanisms from the privacy policy may breach transparency and consent obligations under GDPR Article 13, CCPA, and UK PECR, which require services to clearly disclose the purposes of tracking cookies and provide users with accessible choice before those cookies are placed. The updated policy now discloses only that essential cookies are used to make Canva work, without explaining non-essential cookie purposes or providing a documented choice mechanism. If these disclosures and controls have not been relocated to another accessible, publicly available document, the privacy policy may no longer satisfy legal requirements to inform users about the scope and purpose of cookie tracking.
→ Non-essential cookie purposes that were previously disclosed in the privacy policy are no longer visible in that document; users cannot confirm the scope of cookie tracking from the updated policy.
→ Cookie choice buttons previously embedded in the privacy policy are no longer accessible in that location; if Canva has not relocated the choice mechanism to another accessible document, users may have limited ability to manage non-essential cookies.
Removed language describing non-essential cookie uses for personalization, ad targeting, partner site tracking, and performance analysis.
Removed 'Accept all cookies' and 'Manage cookies' buttons previously presented in the privacy policy.
Removed reference directing users to 'Learn more about your choices in our cookie policy'.
These clauses may change again. Monitor gets you a same-day alert with the diff.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Users can no longer see in the privacy policy what non-essential cookies do or access cookie choice buttons within the policy document.
Canva removed explicit disclosure of non-essential cookie purposes and user choice mechanisms from its privacy policy on May 14, 2026. Under GDPR Article 13 and CCPA Section 1798.140(ae), services must obtain informed consent before placing non-essential tracking cookies and must disclose the purposes of such tracking in privacy notices. Removing cookie purpose disclosures and choice UI from the main privacy policy may not comply with transparency and consent requirements if cookie tracking continues. UK PECR and ePrivacy Directive requirements similarly mandate prior consent and clear disclosure for non-essential cookies. A compliance review is warranted to confirm whether Canva's cookie consent mechanism has been moved to a separate cookie banner or policy document, and whether that mechanism satisfies applicable consent and disclosure standards.
Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002094.
Canva's privacy policy footer was updated on July 25, 2026 to add a reference to 'Canva Manual Domain Attestation' in …
Canva added a link to a 'Canva Manual Domain Attestation' policy in its Terms of Use footer, detected on July …
Canva's privacy policy was updated on July 21, 2026 to add a reference to an 'Indirect Master Services Agreement' in …
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and lia…
Get alerted when this policy changes again, including what changed and why it matters.