Skip to main content

Website evidence · pilot dataset

Does canva.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 6 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T14:17:15.772127Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCanva: Visual Suite for Everyone

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.canva.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

fonts.load1 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 185 · col 444
DeviceReads browser and display properties.5 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.platform14 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 108 · col 58
navigator.userAgent378 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/1c0eb605936072cb.sentry_browser.jsline 1 · col 3656
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 142 · col 308
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 364 · col 289
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 760 · col 343
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1152 · col 334
screen.height17 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 199 · col 69
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 358 · col 43
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 905 · col 56
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 131
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 240
screen.width27 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 197 · col 316
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 199 · col 90
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 358 · col 33
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 905 · col 78
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 103
window.devicePixelRatio12 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 189
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 259
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 356
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://static.canva.com/web/60121d5e7d2e0f13.jsreCAPTCHA · 3 API patterns
Network and worker observations 90 requests
Captured scripts
10
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • accounts.google.com
  • google.com
  • o13855.ingest.sentry.io
  • static.cloudflareinsights.com
Other recorded API calls 2
  • document.cookie.read27 calls
  • document.cookie.write9 calls
Source record and integrity
Original source
results/headful/canva-com-20261022T141715.json
Original file SHA-256
3ceebc9fb9d8226cc96bb37f3f42218c5e95da485220741b963b6f4f9057d722

Run ID: headful-3ceebc9fb9d8. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-21T23:02:14.573982Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleCanva: Visual Suite for Everyone

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.canva.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

fonts.load1 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 185 · col 444
DeviceReads browser and display properties.5 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.platform14 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 108 · col 58
navigator.userAgent378 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/1c0eb605936072cb.sentry_browser.jsline 1 · col 3656
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 142 · col 308
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 364 · col 289
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 757 · col 343
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1148 · col 310
screen.height17 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 199 · col 69
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 358 · col 43
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 902 · col 56
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 131
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 240
screen.width27 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 197 · col 316
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 199 · col 90
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 358 · col 33
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 902 · col 78
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 103
window.devicePixelRatio12 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 189
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 259
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 356
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://static.canva.com/web/d8e1737d4ff0c502.jsreCAPTCHA · 3 API patterns
Network and worker observations 39 requests
Captured scripts
10
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • accounts.google.com
  • google.com
  • o13855.ingest.sentry.io
  • static.cloudflareinsights.com
Other recorded API calls 2
  • document.cookie.read27 calls
  • document.cookie.write9 calls
Source record and integrity
Original source
results/headful/canva-com-20261021T230214.json
Original file SHA-256
815699641ad3d23b63bc6399e333d75f44af8946e47e12bd147601aaed0991e5

Run ID: headful-815699641ad3. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T14:17:14.677693Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/canva-com-20261022T141714.json
Original file SHA-256
f196b4ff1e6794fe0a5192e26ecad3e39b30c7618a785d8bddda9c12c732ffb8

Run ID: headful-f196b4ff1e67. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T21:19:35.485067Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCanva: Visual Suite for Everyone

CanvasDraws text and reads canvas output.3 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://www.canva.com/gtg/[redacted-id]line 398 · col 431
canvas.getContext1 calls

Frame: https://ct.canva.com/_/service_worker/6al0/sw_iframe.html

  • Inline caller recorded
canvas.getContext1 calls

Frame: https://www.canva.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

fonts.load1 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 185 · col 444
DeviceReads browser and display properties.6 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language5 calls

Frame: https://www.canva.com/

  • https://www.canva.com/gtg/[redacted-id]line 1139 · col 208
navigator.platform18 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 108 · col 58
navigator.userAgent548 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/1c0eb605936072cb.sentry_browser.jsline 1 · col 3656
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 142 · col 308
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 364 · col 289
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 760 · col 343
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1152 · col 334
screen.height41 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 199 · col 69
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 358 · col 43
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 905 · col 56
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 131
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 240
screen.width54 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 197 · col 316
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 199 · col 90
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 358 · col 33
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 905 · col 78
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 103
window.devicePixelRatio30 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 189
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 259
  • https://static.canva.com/web/60121d5e7d2e0f13.jsline 1393 · col 356
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsad.doubleclick.net, googleads.g.doubleclick.net, www.googleadservices.com
  • Google Tag Managerwww.googletagmanager.com

Static script signatures

  • https://static.canva.com/web/60121d5e7d2e0f13.jsreCAPTCHA · 3 API patterns
Network and worker observations 149 requests
Captured scripts
27
Instrumented frames
3
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

  • https://ct.canva.com/_/service_worker/6al0/sw.jsThird-party hosts: None recorded

Third-party hosts

  • accounts.google.com
  • ad.doubleclick.net
  • alb.reddit.com
  • cdnjs.cloudflare.com
  • collector-22324.us.tvsquared.com
  • connect.facebook.net
  • google.com
  • googleads.g.doubleclick.net
  • o13855.ingest.sentry.io
  • pixel-config.reddit.com
  • static.cloudflareinsights.com
  • www.facebook.com
  • www.google.com
  • www.googleadservices.com
  • www.googletagmanager.com
  • www.redditstatic.com
Other recorded API calls 2
  • document.cookie.read139 calls
  • document.cookie.write31 calls
Source record and integrity
Original source
results/headless/canva-com-20261022T211935.json
Original file SHA-256
77c13eea46ffca9dce2d08ad285395fc4ec953a021dcfbfb7ac0cb4812b8fd28

Run ID: research-77c13eea46ff. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-21T21:21:40.266703Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleCanva: Visual Suite for Everyone

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.canva.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

fonts.load1 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 185 · col 444
DeviceReads browser and display properties.5 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.platform14 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 108 · col 58
navigator.userAgent378 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/1c0eb605936072cb.sentry_browser.jsline 1 · col 3656
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 142 · col 308
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 364 · col 289
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 757 · col 343
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1148 · col 310
screen.height20 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 199 · col 69
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 358 · col 43
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 902 · col 56
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 131
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 240
screen.width30 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 197 · col 316
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 199 · col 90
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 358 · col 33
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 902 · col 78
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 103
window.devicePixelRatio15 calls

Frame: https://www.canva.com/

  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 189
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 259
  • https://static.canva.com/web/d8e1737d4ff0c502.jsline 1390 · col 356
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://static.canva.com/web/d8e1737d4ff0c502.jsreCAPTCHA · 3 API patterns
Network and worker observations 36 requests
Captured scripts
10
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • accounts.google.com
  • google.com
  • o13855.ingest.sentry.io
  • static.cloudflareinsights.com
Other recorded API calls 2
  • document.cookie.read28 calls
  • document.cookie.write10 calls
Source record and integrity
Original source
results/headless/canva-com-20261021T212140.json
Original file SHA-256
31d8de2c58cbd1730e792fd110e40ec9261d310757c94878cf18ef00f8618f25

Run ID: research-31d8de2c58cb. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T17:46:56.250371Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/canva-com-20261022T174656.json
Original file SHA-256
c5ae0274d201c69d7eaa21e26d554ff94a7319242d4e688b536b36b619f2a584

Run ID: research-c5ae0274d201. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →