1 Concern2 Mixed1 Positive
C+58 / 100
In Plain English
Cursor collects account data (name, email, payment), device and usage data, and — critically — "Inputs" (code snippets, prompts) and "Suggestions" (AI responses). In Privacy Mode ON, code and prompts are processed in memory only and never persisted; they have zero data retention agreements with OpenAI and Anthropic. In Privacy Mode OFF (default on Free/Pro), this data is stored and may be used to evaluate and improve AI. Cursor does not sell your data or use it for targeted advertising. Business plans default to Privacy Mode on.
Category Breakdown
Known data breaches
No known public data breaches
Cursor does not appear in the Have I Been Pwned database of publicly disclosed data breaches.
How Cursor could earn a higher grade
Recommended changes
- Publish a clear technical explanation of what 'Privacy Mode OFF' means in practice — specifically which code is retained, for how long, and who can access it.
- Make Privacy Mode ON the default for all new users rather than opt-in — most users do not read settings before using the product.
- Publish a list of the AI model providers used in non-Privacy-Mode operation and what data each provider retains.
- Provide a commitment that code snippets processed in Privacy Mode are deleted from all systems (including inference infrastructure) within a defined time window.
- Publish a transparency report covering any government or legal requests for user code or conversation data.
Alternatives to Cursor
B
Vercel Inc.
72/100
Vercel collects your account data, professional info, and — critically for developers — your source code and deployment…