Last updated: June 15, 2026
Introduction
Welcome to Canva Beginners. We respect your privacy and are committed to protecting your personal data. This comprehensive privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this policy carefully to understand our practices regarding your personal data.
Information We Collect
We collect minimal information to provide and improve our service:
- Usage Data: Anonymous page view statistics via Umami analytics, which does not use cookies or collect personal identifiers. This includes pages visited, time spent on pages, referring URLs, and browser type — all aggregated and anonymized.
- Ad Data: Google AdSense may use cookies, web beacons, and similar tracking technologies to serve personalized ads based on your browsing history and interests across websites.
- Log Data: Like most websites, our servers automatically collect certain information when you visit, including your IP address (anonymized), browser type, operating system, and the date and time of your visit. This information is used for security, analytics, and troubleshooting purposes.
- Device Information: We may collect information about the device you use to access our site, including hardware model, operating system version, and unique device identifiers, to optimize your browsing experience.
How We Use Your Information
We use the collected data for the following purposes:
- Analyzing website traffic and usage patterns to understand what content our visitors find most valuable
- Serving relevant advertisements through Google AdSense to support our content creation efforts
- Improving our content quality, website structure, and overall user experience based on visitor behavior
- Detecting and preventing fraudulent activity, unauthorized access, and security threats
- Complying with legal obligations and enforcing our terms of service
Cookies and Tracking Technologies
This site uses cookies and similar tracking technologies for the following purposes:
- Google AdSense: Uses cookies to serve personalized advertisements based on your interests and browsing history. These cookies may track your visits across different websites to build a profile of your interests.
- Umami Analytics: Does not use cookies; respects Do Not Track headers and is fully GDPR-compliant by design. All data collected is anonymous and cannot be used to identify individual users.
- Essential Cookies: Cloudflare, our CDN provider, may set essential cookies for security purposes, such as challenge pages and DDoS protection. These are strictly necessary for the functioning of the website.
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for specific websites. Disabling cookies may affect the personalization of ads but will not affect your ability to access and read our content.
Third-Party Services
We use the following third-party services on our website:
- Google AdSense: Serves contextual and personalized advertisements. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our sites and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings or the Digital Advertising Alliance's opt-out page.
- Umami Analytics: An open-source, privacy-focused analytics platform that collects anonymous usage data without cookies. Umami is self-hosted on our infrastructure, ensuring that your data never leaves our control. View their privacy policy at umami.is/privacy.
- Cloudflare: We use Cloudflare as our content delivery network (CDN) and security provider. Cloudflare may process your IP address and other connection metadata for the purposes of DDoS protection, SSL/TLS encryption, and content optimization. Cloudflare is certified under the EU-US Data Privacy Framework.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. Analytics data is retained in aggregated form indefinitely for trend analysis. Log data is retained for a maximum of 30 days for security and troubleshooting purposes before being anonymized or deleted. Ad-related data is managed by Google AdSense according to their own data retention policies.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Deletion: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected
- Opt-Out: Opt out of personalized advertising via YourAdChoices or Your Online Choices
- Data Portability: Request a structured, commonly used, and machine-readable copy of your data
- Objection: Object to the processing of your personal data for direct marketing purposes
- Withdraw Consent: Withdraw your consent at any time where we rely on consent as the legal basis for processing
To exercise any of these rights, please contact us using the information provided in the Contact section below. We will respond to your request within 30 days.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including SSL/TLS encryption for all data transmitted between your browser and our servers, regular security audits, and strict access controls. All data is transmitted over encrypted connections using HTTPS. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
International Data Transfers
Your information may be transferred to and processed in servers located in countries other than your own. Our website uses Cloudflare's global network, which includes servers in multiple regions worldwide. When we transfer your data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adherence to the EU-US Data Privacy Framework where applicable.
Children's Privacy
Our website is intended for general audiences and does not knowingly collect personal information from children under the age of 16. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us, and we will take steps to delete such information promptly.
California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. You have the right to know what personal information we collect, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information. We do not sell your personal information. To exercise your CCPA rights, please contact us using the information below.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or industry standards. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your information. Material changes will be notified through a prominent notice on our website.
Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us through our website's contact page or reach out via the information provided on our site. We are committed to addressing your concerns and will respond to all legitimate requests within a reasonable timeframe.