Windsurf updated its Security & Data Handling policy on May 16, 2026 to disclose two practices involving data exposure. The policy now states that Windsurf uses Raindrop, a third-party service, to view usage analytics and aggregate statistics, and that users not using Zero-data retention mode may have their logs exposed for debugging purposes. Previously, this disclosure was not present in the policy.
low severity
2Sentences added
0Sentences removed
0Sentences modified
194Sentences before
196Sentences after
Added
Removed
Modified
Before
After
126
Raindrop (May see code data if not on zero-data retention): We use Raindrop for dashboards to view usage analytics and aggregate statistics.
127
We may expose logs of data for debugging purposes from users that are not using Zero-data retention mode.
Stay ahead of the changes
Watch this before it changes again
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.