Cookie Policy — September 21, 2026

Cursor · agreement dated October 19, 2026 · Official agreement

Read the agreement

1 of 25 cards in Account & Service Control

Account & Service Control · Context

Non-essential list includes an Authentication cookie and a team API key cookie

The non-essential table lists workos_id (labelled Authentication) and team_api_key (labelled Functional), while the essential table lists other Anysphere cookies labelled Authentication, such as WorkosCursorSessionToken. The policy says non-essential cookies can be enabled or disabled at any time. It does not explain why these two are non-essential or what changes if they are disabled.

Details
Who
Anysphere
What it covers
workos_id and team_api_key, compared with WorkosCursorSessionToken in the essential list

Supporting quotations

Anysphere workos_id cursor.com Authentication
Anysphere team_api_key cursor.com Functional
Anysphere WorkosCursorSessionToken cursor.com Authentication

Qualifications & exceptions

  • Listed in the non-essential table, so the policy's disable-at-any-time statement applies to them as written.

Not stated here

  • Source ambiguity: the policy gives no reason these are non-essential and no effect of disabling them. Nothing is inferred here.
  • The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.

Cross-references

  • contrast (model-proposed): Essential list: Anysphere sign-in and security cookies — The essential table lists Authentication cookies that cannot be disabled, while the non-essential table, which the policy says can be disabled at any time, also lists an Authentication cookie; the policy does not explain the difference.