Provision record
Cursor · Cursor Data Use & Privacy Overview · View original document ↗

Cached file contents encrypted with client-generated keys

Low severity Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Cursor and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Cursor's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Jun 10, 2026

The updated policy clarifies that Cursor maintains zero data retention agreements with all AI model providers and customer data will not be used for training by Cursor. However, the policy now explicitly discloses that model providers may run risk classifiers to detect policy violations, and if your prompts or conversations trigger abuse detectors, your data may be stored for investigation and deleted according to the provider's retention policies. The policy removed the previous blanket statement that code would never be trained on by Cursor or third parties, replacing it with more specific disclosure of abuse detection practices. You can review OpenAI and Anthropic's documentation directly for details on their specific retention policies.

View change record →

How other platforms handle this

Skillshare Medium

by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings of the Services.

Baseten Medium

These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.

GitHub Medium

GitHub uses appropriate administrative, technical, and physical security controls to protect your Personal Data.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
The files are encrypted using unique client-generated keys, and these encryption keys only exist on our servers for the duration of a request.

Excerpt from Cursor's Data Use & Privacy Overview

Provision details

Document information
Document
Cursor Data Use & Privacy Overview
Entity
Cursor
Document last updated
May 11, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-059558
Document ID
CA-D-00764
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
b99e852f1ad6e7f2138edb3e355e61411f60e79b811fb2af6c88fcd7ff48ef25
Analysis generated
July 9, 2026 14:51 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Cursor
Document: Cursor Data Use & Privacy Overview
Record ID: CA-P-059558
Captured: 2026-07-09 14:51:27 UTC
SHA-256: b99e852f1ad6e7f2…
URL: https://conductatlas.com/platform/cursor/cursor-data-use-privacy-overview/provision/CA-P-059558/cached-file-contents-encrypted-with-client-generated-keys/
Accessed: Aug. 2, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Cursor's Cached file contents encrypted with client-generated keys clause do?

The clause states: “The files are encrypted using unique client-generated keys, and these encryption keys only exist on our servers for the duration of a request.”

Is ConductAtlas affiliated with Cursor?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cursor.