Windsurf updated its Security & Data Handling policy on May 16, 2026 to disclose two practices involving data exposure. The policy now states that Windsurf uses Raindrop, a third-party service, to view usage analytics and aggregate statistics, and that users not using Zero-data retention mode may have their logs exposed for debugging purposes. Previously, this disclosure was not present in the policy.
The updated policy now explicitly states that Windsurf uses Raindrop to view usage analytics and aggregate statistics, and that debug logs may be exposed for users not on zero-data retention mode. Previously these practices were not disclosed in the policy. The policy establishes that Zero-data retention mode provides more restricted log access, while standard users operate under different log exposure terms. You can switch to Zero-data retention mode to limit debug log exposure.
→ Review whether Zero-data retention mode is available and whether enabling it meets your data retention preferences.
Explicitly states that Raindrop is used for dashboards to view usage analytics and aggregate statistics.
States that logs may be exposed for debugging purposes from users not using Zero-data retention mode.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Windsurf added explicit disclosure of third-party analytics tool usage (Raindrop) and debug log exposure practices. This represents a clarification of data handling practices rather than a substantive operational change. The disclosure may engage GDPR Articles …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002146.
Windsurf's Terms of Service footer navigation was updated in an update detected on July 24, 2026 to add two new …
Windsurf updated its privacy policy footer to add a link to a 'Service Level Agreement' document between the Data Processing …
Windsurf's Security & Data Handling page was updated to remove one sentence from the opening paragraph. The phrase 'Copy page' …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.