Not sure what my settings are but I've definitely seen the pop up at browse time "Website wants to access canvas data" or similar with a decline option. It might be under the umbrella of settings changed by setting Enhanced Tracking Protection to Strict.