Privacy Policy

Last updated: 01 September 2025

We use cookies and similar technologies, such as pixel tags and clear GIFs (also known as web beacons), on our website (the “Website”) and app to store information or gain access to information stored on your device or computer. You can find out more about cookies and similar technologies, and how we use them, in the information set out below. Any information that we collect will be used in accordance with our Privacy Policy.

If you do not accept the use of these cookies or similar technologies, you can disable them by following the instructions in this policy below or by changing your browser settings so that cookies or similar technologies from our Website or app cannot be placed on your computer or mobile device.

  1. What are cookies and similar technologies?

Cookies. Cookies are small text files that uniquely identify your browser or device. The cookie file is stored on your browser. When you return to that website (or visit websites that use the same cookies) these websites recognize the cookies and your browsing device.

Cookies are not the only way to recognize or track visitors to a website. We also use technologies which are similar to cookies, such as web beacons/pixels, log files and mobile device identifiers.

Web beacons/Pixels/Gifs. Web beacons (also called “tracking pixels” or “clear gifs”) are invisible picture files/small portions of code that contain a unique identifier that enable us to recognize users when providing the Services. Web beacons collect information such as a record of the page on which they are placed and a timestamp. We use web beacons to track the online usage patterns of our users and in HTML-based emails sent to our users to track which emails are opened and which links are clicked by recipients, which helps us measure the success of our marketing campaigns. We also use web beacons placed by third party advertisers to track whether you have clicked on the adverts they have placed and to measure success. While you may not have the ability to specifically reject or disable these tracking technologies, in many instances, these technologies are reliant on cookies to function properly; accordingly, in those instances, declining cookies will impair the functionality of these technologies.

Local shared objects. Local shared objects (also called “flash cookies”) are pieces of data that are stored on a device to enable Adobe’s Flash functionality. We may use Adobe Flash to display graphics, interactive animations and other enhanced functionality. Local shared objects can track similar parameters to cookies but they can also provide information on your use of the specific feature that the cookie is enabling. For example, if it facilitates the display of a video then we can receive details of how much of the video was watched and when viewing stopped. Flash cookie management tools can be accessed directly via www.adobe.com.

Software development kits. Software development kits (SDK) are third-party software development kits that may be installed in our mobile applications. SDKs collect certain information about the device and network you use to access the application and help us understand how you interact with our applications.

Device identifiers. The Service may use one or more device identifiers to recognize your device, including the Android Advertising ID and iOS Advertising Identifier, which we use for advertising purposes. You can reset your device identifier or opt out of targeted advertising in through your device settings.

Fingerprinting. Fingerprinting involves combining a set of features or characteristics from a device or browser (e.g. information from HTTP headers, browser language, time zone, JavaScript objects, installed fonts, installed plugins) in order to uniquely identify you. We may use fingerprinting for security or user safety purposes.

  1. Categories of cookies

Cookies do many different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience. Cookies can tell us, for example, whether you have visited the Website before or whether you are a new visitor. They can also help to ensure that adverts you see online are more relevant to you and your interests.

Just like you can get choc-chip, ginger and peanut butter cookies, you can get different types of online cookies.

There are different categories of cookies, including:

  • First-party cookiesFirst party cookies, which are served directly by us to your computer or device.
  • Third-party CookiesThird-party cookies, which are served by a third party on our behalf.

Cookies can remain on your device for different periods of time. Some cookies are ‘session cookies’, meaning that they exist only while your browser is open. These are deleted automatically once you close your browser. Other cookies are ‘permanent cookies’, meaning that they survive after your browser is closed. They can be used by the Website, for example, to recognise your computer when you open your browser and browse the Internet again.

  1. What cookies do we use and how do we use them?

The types of cookies and similar technologies used by us and our partners in connection with the Website can be classified into one of four categories, namely ‘essential cookies’, ‘functionality cookies’, ‘performance cookies’ and ‘targeting cookies’’. We have set out some further information about the cookies that we and third parties use, and the purposes for their use and durations, in our page – Manage Cookies.

In addition to the cookies we use on this website, we use technologies such as pixel tags in some emails and push notifications which enable us to understand whether you have opened the email and how you have interacted with it.

See our full list of cookies and what they do at our Manage Cookies page.

  1. Google analytics

We use Google Analytics, which is a web analytics tool that helps us understand how users engage with the Website. Like many services, Google Analytics uses first-party cookies to track user interactions, as in our case, where they are used to collect information about how users use our site. This information is used to compile reports and to help us improve our service. The reports disclose website trends without identifying individual visitors. For more information on Google Tag Manager, see here. For more information on Google Analytics, see here.

You can opt out of Google Analytics without affecting how you visit our site – for more information on opting out of being tracked by Google Analytics across all websites you use, see here.

If you don’t want Google Analytics to be used in your browser, you can also install the Google Analytics browser add-on.

  1. Targeted advertising

Our advertising partners use device identifiers and other similar technologies to show you ads that are useful to you. We may share certain information such as your location, browser and cookie data and other data relating to your use of our Service with our business partners to deliver personalized advertisements (“ads”) that may be of interest to you.

Canva may allow third-party ad servers or ad networks to serve personalized advertisements either on the Service or on third party websites, including Facebook and Google. These third-party ad servers or ad networks use technology to send, directly to your browser or mobile device, these personalized ads and ad links, and will automatically receive your IP address when they do so. They may also use other technologies (such as cookies, JavaScript, device identifiers, location data, and clear gifs, see above) to compile information about your browser’s or device’s visits and usage patterns on the Service, and to measure the effectiveness of their ads and to personalize the advertising content. Canva does not sell, rent, or share the information we collect directly from you or about you from third parties with these third-party ad servers or ad networks for such parties’ own marketing purposes.

Please note that an advertiser may ask Canva to show an ad to a certain audience of users (e.g., based on demographics or other interests). In that situation, Canva determines the target audience and Canva serves the advertising to that audience and only provides anonymous aggregated data to the advertiser. If you respond to such an ad, the advertiser or ad server may conclude that you fit the description of the audience they are trying to reach.

Facebook: We use the pixel function of Facebook Custom Audiences to identify users who have landed on certain pages for the purposes of target group-orientated remarketing and advertising. The Facebook pixel stores a cookie, which means that information about your visit to our Website will be shared with Facebook. Also, as part of the “advanced matching” undertaken by Facebook, other information (such as telephone number, email address, Facebook ID) may be shared with Facebook in a hashed form. These cookies, and the information collected, are used to help Facebook deliver advertising on our behalf to users who have previously visited our Website when they are on Facebook or another platform powered by Facebook Advertising, and to track advertising success. You can modify your Facebook Ad settings to restrict these advertisements. Learn more about the different types of Facebook cookies here: https://www.facebook.com/policies/cookies/

  1. How to control or delete cookies and similar technologies

We use cookies on this site to make sure you can use the Website easily and enjoy the Website. Some of these cookies are essential and we cannot provide our service without them, but there are others that can be turned off (depending on the device you use). Note that, depending on the type of device you have, it may not be possible to delete or disable tracking mechanisms. For some tracking technologies, you may also not have the ability to specifically reject or disable tracking. However, in many instances these technologies are reliant on cookies to function properly; accordingly, in those instances, declining cookies will impair the functionality of these technologies. In addition, note that disabling cookies and/or similar technologies prevents Canva or its business partners from tracking your browser’s activities in relation to the Service, and for use in targeted advertising activities by Canva, including via third party websites. It also disables many of the features available through the Service.

How to change your browser settings

You can change your preferences by changing the settings in your browser. Your browser will allow you to:

  • See what cookies or other similar technologies have been dropped on your device;
  • Block cookies or similar technologies;
  • Clear cookies or similar technologies from your browser.

Deleting cookies or similar technologies means that any preference settings you have made on a particular website will be lost and the functionality of our Website will be impaired. We cannot guarantee that your experience on our Website will be as good as it could otherwise be.

If you want to change your settings at any time (for example, if you accept all cookies, but later decide you do not want a certain type of cookie) you’ll need to use your browser settings to remove any third party cookies or similar technologies dropped on your previous visit.

For more information on how to manage the most popular browsers, please see below:

How to opt out of online ads

Some users will have the option to opt out of seeing targeted online ads from participating companies by visiting http://www.aboutads.info/choices/, http://www.youronlinechoices.com or similar websites in your jurisdiction. Please note that this list will contain more networks than those used on our site.

Alternatively, you can opt out of certain cookies through the settings in your browser or reset the advertising ID on your mobile device via settings.

To learn more about the advertising companies we work with and the choices they offer, please take a look at the following resources:

How to opt out of mobile advertising

If you are using a mobile device, you can opt out of having your mobile advertising identifiers used for certain types of targeted advertising, including those performed by us, by accessing the settings in your Apple or Android mobile device and following the most recent published instructions. If you opt out, the random ID we (or our third-party partners) had previously assigned to you will also be removed. This means that if at a later stage, you decide to opt-in, we will not be able to continue and track you using the same ID as before, and you will effectively be a new user to our system.

How to opt out of third party cookies

You also have the option to opt out of having your browsing activity within websites recorded by cookies and other technologies. In addition to managing cookies in your browser settings (described above), you can opt out of certain cookies by clicking on the links provided below. Please note that this will take you to the relevant third party website.

Google Analytics, Google Ads and Google Tag Manager

Facebook

LinkedIn Insights

Pinterest

Optimizely

Hotjar

Twitter

Yahoo Ad Exchange

Liveramp

FullStory

Please note that if you choose not to receive our cookies, we cannot guarantee that your experience on our Website will be as good as it could otherwise be.

Do Not Track

Some browsers include the ability to transmit “Do Not Track” or “DNT” signals. Since uniform standards for “DNT” signals have not been adopted, our Website does not currently respond to “DNT” signals. We will continue to monitor developments around DNT browser technology and the implementation of standard signals.

  1. Changes to this policy

We will occasionally update this policy to reflect changes in our practices and services. When we post changes to this policy, we will revise the “Last Updated” date at the top of this policy. If we make any material changes in the way we collect, use, and/or share information held in cookies, we will notify you by prominently posting notice of the changes on the Website. We recommend that you check this page from time to time to inform yourself of any changes in this policy or any of our other policies.

  1. Cookies that have been set in the past

If you have disabled one or more cookies, we will still use information collected from cookies prior to your disabled preference being set, however, we will stop using the disabled cookie to collect any further information.

If you refuse cookies, we may still use information that we’ve already collected.

  1. Need more information?

You can read more about how we use your information in our Privacy Policy.

  1. Additional cookie details

Most web browsers are set to accept cookies by default, however, you may be able to delete cookies yourself through your browser’s cookie manager. To do so, please follow the instructions provided by your web browser. Please note that disabling cookies will reset your session, disable auto-login, and may adversely affect the availability and functionality of our Websites and the services we can provide to you.

Strictly Necessary Cookies.

Strictly Necessary cookies are essential to providing the Cloudflare Websites and Services to you and cannot be turned off. They provide necessary security settings or help you use our Websites’ features and Services as expected (including remembering your cookie consent preferences). Cloudflare places Strictly Necessary cookies both on Cloudflare Websites as well as on our Customers’ websites.

For example, when you visit our Websites or our Customers’ websites, as part of our Services, we may place bot detection cookies (such as „_cf_bm”), cookies for CAPTCHA products (like cf_clearance, cf_chl_rc_i and cf_chl_rc_ni), and a load balancing cookie (_cflb) on the computers of visitors to our Websites and of our End Users. We do this in order to identify malicious visitors to our Websites and our Customers’ websites, to assist with web-traffic filtration, and to reduce the chance of blocking legitimate users. You can learn more about these cookies [here]. You cannot turn off Strictly Necessary cookies.

Functional Cookies.

Functional cookies allow us to remember choices you make about the kind of experience you want on our Websites and to provide you with a more personalized experience. For example, a functional cookie is required to remember which language you prefer. You may choose to opt out of these cookies, but if you do, various functions of the Websites or Services may be unavailable to you or may not work as intended.

Performance.

Performance cookies help us learn how you use our Websites to help improve their performance and design. These cookies provide us with aggregated statistical information such as number of page visits, page load speeds, how long a user spends on a particular page, and the types of browsers or devices used to access our Websites. For example, we may use cookies to understand what pages you browsed before submitting a sales request form. You may opt out of these cookies through the “Cookie Preferences” (or, in the United States, the “Your Privacy Choices” link) on cloudflare.com or through the links listed below.

Some of the Performance cookies we use are:

In addition, we also may include tracking pixels, which are small graphic images, in our email messages to determine whether the messages were opened and if the links were clicked. If you do not want to receive tracking pixels in emails we send you, you will need to disable HTML images in your email client, but that may affect your ability to view images in other emails you receive.

Targeting.

These third-party cookies are placed by third-party advertising platforms or networks to collect information about your visits to and actions on certain pages of our Websites so that they can deliver ads for relevant Cloudflare products and services to you later, such as when you are on certain third-party sites. These cookies also track ad performance.

Cloudflare does not sell your Personal Information in the conventional sense (i.e., for money). Like many companies, however, we use services that help deliver interest-based ads to you and may transfer Personal Information to business partners for their use. Making Personal Information (such as online identifiers or browsing activity) available to these companies may be considered a “sale” or “sharing” of your Personal Information under the California Consumer Privacy Act of 2018 (California Civil Code Sec. 1798.100 et seq.).

We do not sell, rent, or share personal information with third parties for their direct marketing purposes as defined under the California Shine the Light Act (Civil Code Sec. 1798.83). We do permit third parties to collect personal information as described in our Privacy Policy for the business purposes described here.

You may opt out of Targeting cookies through the „Cookie Preferences” (or, in the United States, the “Your Privacy Choices” link) on cloudflare.com or through the links listed below. If you wish to opt-out of cookies that collect information to serve you interest-based ads generally, you may opt-out by clicking here (or if located in the European Union or United Kingdom, click here).

Some of the Targeting cookies we use are: