Manage Cookies

Essential Cookies

These cookies are essential to provide you with the Website and any services available and to use some of its features, such as access to secure areas. Without these cookies, services you have asked for, like transactional pages and secure login accounts would not be possible.

Because these cookies are essential to provide you with the Website and other services, you may not be able to block them. However, you can refuse or delete web beacons by clearing your browser settings, as described below.

Cookie NameDuration
Canva
We set these cookies for essential purposes. Used for security and authentication purposes.
CDI1 Year
CAC90 days
CID, CAZ, CAR, CB, CL, CS, CUI30 days
CPA, CPA2, CCK3 Hours
COS2 Hours
CDP1 Year
CTC6 Months
ajs_anonymous_id, ajs_user_id, CAI1 Year
lithiumSSO
Used to allow users to log in via SSO to our community forum, operated by Khoros
30 days
Cloudflare
We use Cloudflare to support our Website performance and infrastructure. To learn more about Cloudflare, see here.
__cfduid
Used to detect malicious visitors to our websites and minimize blocking legitimate users.
1 Month
__cf_bm
Used to identify and mitigate automated traffic to protect our website from bad bots.
30 Minutes
cf_clearance
Used to manage the security captcha process storing details about the success of a captcha attempt.
1 Year
Castle
_cid
Used to help prevent security attacks.
Persistent
_hp2_hld
Used to determine which domain a cookie can be set on, since public suffix domains block setting cookies at the top level.
Session
_hp2_id.APP_ID, _hp2_ses_props. APP_ID
Used to track user behavior on the Website.
13 Months
Stripe
These are cookies set by Stripe. They are used to remember who you are and enable the website to process payments without storing your credit card information. To learn more about Stripe, see here.

Used for fraud detection purposes and to help assess the risk associated with an attempted transaction.
__stripe_mid1 Year
__stripe_sid30 Minutes
Google Login
These cookies are set by Google to enable you to log in to using your Google account.
g_state
Used to manage the logged in state for Google login.
6 Months
Essential Cookies - Mobile App Only

Depending on your device and operating system, our third party providers may collect certain information when you’re using the Canva mobile app. This is essential to ensure our app works properly and remains secure, and includes:

  • Canva - event data capture sent to our back end systems.
  • Castle - We use Castle for security purposes and to detect threats and account takeover attempts.
  • Google Firebase Crashlytics (Android only) - We use Firebase Crashlytics for crash and error reporting.
  • Sentry - We use Sentry for crash and error reporting.
Functionality Cookies

Functionality cookies record information about choices you have made and allow us to provide relevant content and tailor the Website to you. These cookies mean that when you continue to use or come back to the Website, we can provide you with our services as you have asked for them to be provided.These cookies allow us to:

  • Remember settings you have applied, such as layout, text size, preferences, and colors;
  • Show you when you are logged in; and
  • Store accessibility options.
Cookie NameDuration
Canva
We set these cookies to enable certain features of our Website and services.
review_cookie
Used to determine whether a user has already provided a review and to prevent multiple reviews.
Session
like_cookie
Used to remember user likes.
1 Year
Branch
We set these cookies to enable deep linking from the Canva Website to pages in the Canva mobile app. To learn more about Brach, see here.
_s
Used to enable deep linking from the Website to pages in the Canva mobile app.
1 Year
Drift
We use Drift to enable you to chat with a friendly chatbot to find out more about Canva’s products and be put in touch with our sales team. To learn more about Drift, see here.
driftt_aid
Used as a user identifier token to remember information the user has provided through the chat.
2 Years
driftt_sid
Used as a session identifier token to enable session-specific features.
30 Minutes
DRIFT_visitCount, DRIFT_openTabs
Used to determine time on page and number of site visits, and to play sound notifications.
2 Years
DRIFT_SESSION_ID, DRIFT_SESSION_STARTE, DRIFT_ALWAYS_SEND_IDS
Used to tie a user to a browser session, denote when a given session has started and track unique impressions for playbooks.
2 Years
driftt_eidt, drift_ujwt
Used to securely identify users on the Website.
2 Years
driftt_aaid
Used to create a direct correlation between the user and the representative who will receive the communication.
2 Years
_d_mkto, __d_hsutk, __d_eloqua, __d_pardot
Used as markers for Marketo, Hubspot, Eloqua and Pardot cookies.
2 Years
Optimizely
We use Optimizely for website performance and optimization. To learn more about Optimizely, see here.
optimizelyEndUserId
Used as a unique user identifier.
6 Months
optimizelyDomainTestCookie
Used to test different versions of website pages to different users at the same time and to track how users navigate around our Website.
6 Months
AWSELB, optimizelyRumLB
Used to and to Control the AWSELB cookie's attributes.
Session
Functionality Cookies - Mobile App Only

Depending on your device and operating system, our third party providers may collect certain information when you’re using the Canva mobile app to enable its functionality. This includes:

  • Branch - We use Branch to enable deep linking from links on our website to the direct pages in the Canva mobile app.
Performance Cookies

We use performance/analytics cookies to measure traffic and usage data and to analyze how the Website is accessed, used, or is performing in order to provide you with a better user experience and to maintain, operate and continually improve the Website.
These cookies allow us to:

  • Better understand our Website visitors so that we can improve how we present our content;
  • Test different design ideas for particular pages, such as our homepage;
  • Collect information about Website visitors such as where they are located and what browsers they are using;
  • Determine the number of users of the Website;
  • Improve the Website by measuring any errors that occur; and
  • Conduct research and diagnostics to improve product offerings.
Cookie NameDuration
Fullstory
Fullstory is used by Canva to record user sessions to understand how they use the Website and new features. To learn more about FullStory, see here.
fs_uid
Used to identify and distinguish data for each user.
3 Months
Google Analytics
We use Google Analytics to track user behavior on our Website, which helps us better understand how users are using the Website. To learn more about Google Analytics, see Section 4 of this Policy.
_ga
fpid
_gat
_gid
Used to distinguish users by Google Analytics.
2 years
2 years
1 minute
24 hours
_gat_UA-,
Used to limit the amount of data recorded by Google on high traffic volume websites.
2 Years
_gclxxxx,
Used as a Google conversion tracking cookie.
90 days
_dc_gtm_UA-xxxxxxxx,
Used to load scripts on our Website.
Session
Google Optimize
We use Google Optimize to test Website content and for optimization.
_gaexp
Used to determine a user's inclusion in an experiment and the expiry of experiments a user has been included in.
90 days
Hotjar
We use Hotjar to track user behavior on our Website, which helps us better understand how users are using the Website. To learn more about Hotjar, see here.
_hjTLDTest
Used to determine the most generic cookie path that can be used, instead of the page hostname.
Session
_hjAbsoluteSessionInProgress
Used to detect the first pageview session of a user.
30 Minutes
_hjFirstSeen
Used to identify a new user's first session on a website.
Session
_hjIncludedInSessionSample
_hjIncludedInPageviewSample
Used to identify whether a user is included in the data sampling defined by the Website's daily session limit.
30 Minutes
_hjid
Used as a unique user identifier.
1 Year
Data+Math (Liveramp)
These cookies are used by Data + Math to capture anonymous site metrics to help Canva measure advertising effectiveness. To learn more about Data + Math, see here.
tvpixel.com
Used to capture anonymous site metrics to help Canva measure advertising effectiveness.
1 Year
_dpm_idPersistent
(unique user ID: 2 years)
_dpm_ses30 Minutes
Performance Cookies - Mobile App Only

Depending on your device and operating system, we and our third party providers may also collect certain information to measure traffic and usage data when you’re using the Canva mobile app. This includes:

  • Google Firebase - We use Google Firebase to monitor the performance of our mobile app and send data to Google Analytics to help us understand how you use our apps.
Targeting Cookies

We allow third party companies, including advertising companies, to place cookies on our Website. These cookies enable such companies to distinguish and track your activity across various sites so that they can display ads which are relevant to you and record your activities so they can show ads that they consider relevant to you as you browse the Internet.

Cookies also allow us and third parties to know whether you have seen an ad or a type of ad, and how long it has been since you’ve last seen it. This information is used for frequency capping purposes, to help tailor the ads you see, and to measure the effectiveness of ads. We can use information from one device to help personalize your experience on another device.

Cookie NameDuration
Google Tag Manager
gtm_custom_user_engagement
Used to support other marketing tags by recording specific user engagements.
30 Minutes
gtm_custom_user_engagement_lock_4
Used to support other marketing tags by recording specific user engagements.
4 Hours
Canva code
Used by Canva to inject Google Tag Manager to add cookies and manage tags for our Website.
Persistent
Microsoft Advertising
These are cookies set by the Microsoft Advertising platform. To learn more about Microsoft Advertising, see here.
NAP, SRCHD, _HPVN, ANON, BFB, BFBUSR
Used to provide targeted advertising and measurement capability.
2 Years
ipv6, _SS, _EDGE_S
Used to provide targeted advertising and measurement capability.
Session
SRCHUSR, ABDEF, SRCHHPGUSR, _EDGE_V, _RwBf
Used to provide targeted advertising and measurement capability.
1 Year
SnrOvr
Used to provide targeted advertising and measurement capability.
Session
MUID, MR, SRCHD, SRCHUID, MUIDB
Used to anonymously identify user sessions to help us measure the effectiveness of our marketing campaigns.
2 Years
OID
Used as an identifier for an object in Microsoft’s identity system.
3 Months
_uetsid, _uetvid
Used as a unique user identifier and session ID to track what happens after a user clicks on an ad.
30 Minutes
Braze
Braze is a marketing company that develops customer relationship management and mobile marketing automation software. To learn more about Braze, see here.
ab._gd
Used to determine the root-level cookie domain which allows the SDK to work properly across subdomains.
1 Year
ab.storage.sessionId
Used to store the session to enable the Braze services.
1 Year
ab.storage.userId
Used to store a unique user id that enables the Braze services.
1 Year
Pardot (Salesforce)
These cookies help us track activity on our Website in order to target prospective customers. To learn more about Pardot, see here.
visitor_id
Used as unique identifiers for website visitors.
Persistent
visitor_id-hash
Used as unique identifiers for website visitors.
Persistent
lpv
Used to keep Pardot from tracking multiple page views on a single asset over a 30-minute session.
30 Minutes
pardot
Used to denote an active session and isn’t used for tracking.
Session
Google Ads
We use Google Ads to reach our customers via Google’s advertising network. To learn more about Google Ads, see here.
NID
Used to serve and personalize ads, limit the number of times an ad is shown, muting ads you have chosen to stop seeing, and measuring the effectiveness of ads.
6 Months
ANID
Used to serve and personalize ads, limit the number of times an ad is shown, muting ads you have chosen to stop seeing, and measuring the effectiveness of ads.
13 months (Europe), 2 years (elsewhere)
SID, HSID
Used to record a user’s Google account ID and most recent sign-in time. Used for authentication and security purposes.
2 Years
DSID
Used to identify and remember a user’s preferences on non-Google sites.
2 Weeks
_gads
Used to show Google ads on the Website and measure the performance of ads.
13 Months
_gac_, _gcl_, FPGCLAW
Used to show Google ads on the Website and measure the performance of ads.
90 days
__Secure-3PSIDCC, __Secure-3PSID, __Secure-3PAPISID
Used to build a profile of users’ interests to show relevant and personalized ads through retargeting.
2 Years
SIDCC
Used as security measure to protect users data from unauthorised access.
6 Months
SEARCH_SAMESITE
Used to prevent the browser from sending this cookie along with cross-site requests.
Persistent
SAPISID, SSID
Used to collect user information for videos hosted by YouTube.
Persistent
APISID
Used to personalize ads based on recent searches and interactions.
2 Years
1P_JAR
Used on embedded YouTube videos to record statistical data about viewing figures.
1 Month
conversion
Used to measure the conversion from a user seeing a Google ad to becoming a Canva customer.
30 days
Facebook
These cookies and tracking pixels analyze browsing activity to track advertising effectiveness, customize audiences, and improve ad retargeting. To learn more about Facebook tracking, see here.
fr, _fbp
Used by Facebook to deliver personalized advertisements as well as tracking users when set on third-party websites with a Facebook social plugin.
90 days
ATN
Used by Facebook to deliver personalized advertisements as well as tracking users when set on third-party websites with a Facebook social plugin.
2 Years
xs
Used by Facebook to deliver personalized advertisements as well as tracking users when set on third-party websites with a Facebook social plugin.
1 Year
c_user, xs
Used by Facebook to deliver personalized advertisements as well as tracking users when set on third-party websites with a Facebook social plugin.
1 Year
spin
Used by Facebook to deliver personalized advertisements as well as tracking users when set on third-party websites with a Facebook social plugin.
1 day
locale
Used by Facebook to deliver personalized advertisements as well as tracking users when set on third-party websites with a Facebook social plugin.
7 days
oo
Used by Facebook to manage opt-out preferences.
5 Years
wd, dpr
Used by Facebook to measure performance.
7 days
sb, datr
Used by Facebook for safety and security purposes.
2 Years
LinkedIn Insights
These cookies enable behavioral advertising and analytics by LinkedIn. To learn more about LinkedIn Insights, see here.
lidc
Used to optimize data center selection.
24 Hours
bscookie
Used to save the state of 2FA of a logged-in user.
2 Years
bcookie
Used to uniquely identify devices to detect abuse.
2 Years
UserMatchHistory
Used for LinkedIn Ads ID syncing.
30 days
lang
Used to remember a user's language settings.
Session
lissc
Used to ensure there is correct SameSite attribute for all cookies in that browser.
1 Year
Pinterest Ads
These cookies enable behavioral advertising and analytics by Pinterest. To learn more about Pinterest, see here.
_pinterest_sess, _pinterest_ct
Used to store a user’s log in state within the web browser or in-app browser.
1 Year
_pinterest_ct_mw, _pinterest_ct_rt
Used to opens content in the person’s mobile browser or in-app browser.
Session
_epik, _derived_epik
Used when someone clicks on a Pinterest ad to help the Pinterest tag find a match and to cache information to make future matching easier.
1 Year
_pin_unauth, _pinterest_ct_ua
Used as an identifier when Pinterest is unable to make a match.
1 Year
Twitter
These cookies enable targeted advertising on and analytics by Twitter. To learn more about Twitter, see here.
guest_id
Used for Twitter integration and sharing capabilities for the social media.
2 Years
personalization_id
Used for Twitter integration and sharing capabilities for the social media.
2 Years
Google DoubleClick
These cookies enable targeted advertising on and analytics by Google. To learn more about Google DoubleClick, see here.
IDE
Used to deliver the targeted advertising capability.
13 months (Europe), 2 years (elsewhere)
RUL
Used to deliver the targeted advertising capability.
1 Year
test_cookie
Used to deliver the targeted advertising capability.
1.5 Years
YouTube
These cookies enable behavioral advertising and analytics by YouTube. To learn more about YouTube, see here.
CONSENT
Used to save the user's preferences and other information.
Persistent
YSC
Used by YouTube to remember user input and associate a user’s actions.
Session
GPS
Used to obtain GPS data for mobile users.
30 Minutes
VISITOR_INFO1_LIVE
Used as a unique ID to remember your preferences and other information such as your preferred language and how many search results you prefer to have shown on a results page.
6 Months
Yahoo Ad Exchange
These cookies enable targeted advertising on and analytics by Yahoo. To learn more about Yahoo Ad Exchange, see here.
A1, A3, B, GUC, APID
Used to record browsing activity with the purpose of displaying targeted ads.
13 Months
APIDTS
Used to record a user's browsing activity with the purpose of displaying targeted ads.
24 Hours
IDSYNC
Cookie used for targeted ads.
13 Months
Baidu
These cookies enable behavioral advertising and analytics by Baidu.
HMACCOUNT
Used to send data to Baidu about the user's device and behavior. Tracks the visitor across devices and marketing channels.
1 day
SensorsData
We use SensorsData to help serve targeted advertising to users in China.
SERVERID
Used to help serve targeted advertising to users in China.
Persistent
Snapchat
We use these cookies to help serve targeted advertising to users in China.
_scid
Used as a unique ID that allows third party advertisers to target users with relevant advertisements.
1 Year
sc_at
Used as a unique ID that allows third party advertisers to target users with relevant advertisements.
13 Months
Yotpo
These cookies are set by Yotpo, a product review management platform.
pixel
Used as a product reviews tool to help with SEO.
Persistent
_sp_xxxxxxxxxx
Used as a product reviews tool to help with SEO.
Persistent
Tiktok
These cookies enable behavioral advertising and analytics by TikTok.
s_v_web_id
Used to enable behavioral advertising and analytics by TikTok.
1 Year
Targeting Cookies - Mobile App Only

Depending on your device and operating system, our third party providers may collect certain information when you’re using the Canva mobile app for targeted advertising purposes. This includes:

  • Apple Search Ads - Tracking used to attribute when a user comes to the Canva mobile app from the Apple app store
  • AppsFlyer - A mobile marketing and attribution platform that enables Canva to integrate with third party marketing platforms that drive audience back to our mobile apps and track metrics for attribution.
  • Braze - Braze is a messaging platform that allows Canva to deliver marketing campaigns by emails, push notifications and in app messages.
  • Facebook SDK - This SDK provides deep linking capability and also provides metrics relating to app installs, uninstalls and logins.
  • Google Ads - This enables Canva to measure the impact of advertising through Google on app downloads and installs.