Security & Safeguards · Company practice
Essential list: Anysphere sign-in and security cookies
Four of the essential cookies are Anysphere's own cookies for signing in or security on cursor.com: csrf-token (Security), WorkosCursorSessionToken, WorkosCursorReturnTo and WorkosCursorAuthNonce (all Authentication). Essential cookies are the ones the policy says cannot be disabled and are set without a consent request.
Details
- Who
- Anysphere
- What it covers
- csrf-token, WorkosCursorSessionToken, WorkosCursorReturnTo, WorkosCursorAuthNonce on cursor.com
- Why
- Security and authentication
Supporting quotations
Anysphere csrf-token cursor.com Security
Anysphere WorkosCursorSessionToken cursor.com Authentication
Anysphere WorkosCursorReturnTo cursor.com Authentication
Anysphere WorkosCursorAuthNonce cursor.com Authentication
Qualifications & exceptions
- Listed as essential, so the policy's no-disable and no-consent-request statements for essential cookies apply to them.
Not stated here
- The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Cross-references
- contrast (model-proposed): Non-essential list includes an Authentication cookie and a team API key cookie — The essential table lists Authentication cookies that cannot be disabled, while the non-essential table, which the policy says can be disabled at any time, also lists an Authentication cookie; the policy does not explain the difference.