The policy covers cookies and similar technologies Anysphere uses for its Services
This Cookie Policy says what kinds of cookies and similar technologies Anysphere uses in connection with its Services, with "Services" defined in its Privacy Policy. It points to the Privacy Policy for how personal information is processed. The page states it was last updated October 19, 2026.
Details
Who
Anysphere
What it covers
Cookies and similar technologies used in connection with the Services
When
Last updated October 19, 2026
Supporting quotations
Last updated October 19, 2026
This Cookie Policy describes what kinds of cookies and similar technologies Anysphere uses in connection with our Services
Please refer to our Privacy Policy to learn more about how we process your personal information.
Qualifications & exceptions
Covers cookies and similar technologies, not other personal information processing, which the Privacy Policy is pointed to for.
Not stated here
The Privacy Policy is linked but was not supplied, so the definition of "Services" and how personal information is processed are not stated here.
The page gives a last-updated date but no separate effective date.
Data Access & Collection · Company practice
"Cookies" includes local storage, pixels, scripts, tags, link information and server-collected information
Besides ordinary cookies, Anysphere uses local storage to save data on your device. For this policy, the word "cookies" also covers other technologies that store or read information on your device, including web storage, pixels, scripts and tags, information passed in the links you click, and information collected by Anysphere's own servers. The policy says the choices it describes apply to all of these.
Details
Who
Anysphere
What it covers
Web storage, pixels, scripts and tags, link information and server-collected information, all called "cookies"
Condition
For the purposes of this policy
Supporting quotations
We also use local storage to save data on your device.
We use cookies as well as other technologies that store information on your device or read information from it
all of these are included in the term “cookies”, and the choices described below apply to all of them
Qualifications & exceptions
The broad meaning applies "for the purposes of this policy".
Not stated here
The policy does not say how its choices technically apply to information passed in links or collected by Anysphere's own servers.
Cookies help Anysphere recognize you, personalize your experience and analyze use of the Services
Anysphere says cookies let it recognize you, customize or personalize your experience, and analyze how the Services are used. It uses both first-party and third-party cookies to provide the services and resources you may have requested.
Details
Who
Anysphere and third parties whose cookies are used
Why
Recognize you, personalize your experience, analyze use of the Services
Supporting quotations
Cookies help us to recognize you, customize or personalize your experience, and analyze the use of our Services to make it more useful to you.
We use first-party and third-party cookies to provide you services and resources you may have requested.
Qualifications & exceptions
The stated aim is to make the Services more useful to you and to provide services you may have requested.
Not stated here
The policy does not name the third parties here; the cookie lists later in the policy show sources.
Data Access & Collection · Restriction or exception
Essential cookies cannot be disabled and are set without asking for consent
Anysphere uses essential cookies to provide its Services, applications and other essential functionality. You cannot disable them, because the Services need them to function. They are set when you use the Services and Anysphere does not ask for consent, but it describes them in the list below. Blocking them in your browser stops parts of the Services from working.
Details
Who
Anysphere
Condition
Required for the Services to function
Exception
No consent is asked for essential cookies
What it does
User cannot disable essential cookies
Supporting quotations
You cannot disable essential cookies and tools, since they are required for our Services to function.
Essential cookies are set when you use the Services. We do not ask for your consent to these, but we describe them below.
Please note that blocking essential cookies will stop parts of the Services from working.
Qualifications & exceptions
Applies to cookies Anysphere classes as essential. The policy's consent-first rule for the United Kingdom, the European Economic Area and Switzerland is stated only for non-essential cookies.
Not stated here
"Essential cookies and tools" is not defined beyond being required for the Services to function; the cookie list is the policy's only itemization.
The policy does not say how the essential list was decided.
You can enable or disable non-essential cookies at any time
Non-essential cookies are not needed for the Services to function but enhance your experience and the Services' performance. The policy says you can enable or disable them at any time. It groups them as functional, performance and targeting cookies.
Details
What it does
Enable or disable non-essential cookies
When
At any time
Supporting quotations
These cookies are not essential for our Services to function, but they enhance your experience and the performance of our Services. You can enable or disable them at any time.
Qualifications & exceptions
Applies to non-essential cookies only.
The consent-first rule for the United Kingdom, the European Economic Area and Switzerland, and the opt-out wording for elsewhere, are separate cards.
Not stated here
The policy does not say where or how to enable or disable them after the first-visit notice.
Functional and performance cookies remember choices and count visitor traffic
Functional cookies are used by Anysphere to remember choices you have made and provide enhanced features. Performance cookies are used to count visitor traffic so Anysphere can measure and improve the performance of its Services. Both are classed as non-essential.
Details
Who
Anysphere
Why
Remember choices and provide enhanced features; count visitor traffic and improve performance
Supporting quotations
Functional Cookies – used by us to remember choices you have made and provide enhanced features.
Performance Cookies – used to count visitor traffic so that we can measure and improve the performance of our Services.
Qualifications & exceptions
Stated purposes are remembering choices and enhanced features (functional) and counting traffic to measure and improve performance (performance).
Not stated here
The policy does not say which listed cookies belong to which of the three non-essential categories.
Sharing & Disclosure · Company practice
Targeting cookies track ad effectiveness and let advertising partners show you ads elsewhere
Targeting cookies are used by Anysphere and its partners to track how effective specific ads on third-party properties are, through to Cursor account sign-ups and subscriptions. The policy says third-party advertising partners may use these cookies to show you relevant ads on other websites and platforms. If you do not allow them, you will experience less targeted advertising.
Details
Who
Anysphere and its third-party advertising partners
Why
Track ad effectiveness through account sign-ups and subscriptions; show relevant ads elsewhere
Condition
Only if you allow targeting cookies
Supporting quotations
Targeting Cookies – used by us and our partners to track the effectiveness of specific ads on third-party properties through to Cursor account sign ups and subscriptions.
Our third-party advertising partners may use these cookies to show you relevant ads on other third-party websites and platforms.
If you do not allow these cookies, you will experience less targeted advertising.
Qualifications & exceptions
Partners "may" use them to show ads; the policy does not say they always do.
Declining these cookies reduces ad targeting, not necessarily the number of ads.
Not stated here
The policy does not say what information the partners receive or keep through these cookies; the cookie list names the advertising sources.
In the UK, EEA and Switzerland, non-essential cookies wait for your consent
If you are in the United Kingdom, the European Economic Area or Switzerland, Anysphere says it does not set non-essential cookies, and does not let its partners set them, until you have given your consent.
Details
Where
United Kingdom, European Economic Area, Switzerland
Condition
Until you have given your consent
Who
Anysphere and its partners
Supporting quotations
If you are in the United Kingdom, the European Economic Area or Switzerland: We do not set non-essential cookies, and we do not permit our partners to set them, until you have given your consent.
Qualifications & exceptions
Applies to people in the United Kingdom, the European Economic Area or Switzerland.
Covers non-essential cookies set by Anysphere or its partners; essential cookies are not part of this commitment.
Not stated here
The policy does not describe how consent is given beyond the notice shown on a first visit, or whether withdrawing consent works differently.
Cross-references
qualifies (model-proposed): You can enable or disable non-essential cookies at any time — In the UK, EEA and Switzerland, non-essential cookies need prior consent, which qualifies the general statement that non-essential cookies can be enabled or disabled at any time.
Data Access & Collection · Permission or license
Elsewhere, Anysphere may set optional cookies where the law allows, with opt-out "using the same routes"
For people outside the United Kingdom, the European Economic Area and Switzerland, Anysphere says it may set optional cookies where the law allows it to, and that you can opt out at any time "using the same routes". Earlier text does not name routes, so what the phrase refers to is unclear. The nearest described choices are the notice shown on a first visit, and browser controls.
Details
Where
Anywhere other than the United Kingdom, European Economic Area and Switzerland
Condition
Where the law allows
What it does
Anysphere may set optional cookies; you can opt out at any time
Supporting quotations
If you are elsewhere, we may set optional cookies where the law allows us to do so, and you can opt out at any time using the same routes.
Qualifications & exceptions
Applies where you are outside the United Kingdom, the European Economic Area and Switzerland.
Optional cookies are set only "where the law allows".
Not stated here
Source ambiguity: "the same routes" is not defined; no route is named before this sentence.
The policy does not say whether "optional cookies" means exactly the non-essential cookies.
Which laws apply is not stated.
Cross-references
qualifies (model-proposed): You can enable or disable non-essential cookies at any time — Outside those regions, optional cookies may be set where the law allows and the user opts out; this states the regional default alongside the general choice, and its "same routes" wording is unclear.
Data Access & Collection · User right or choice
You are shown a notice on your first visit to choose your cookie preferences
The policy says you have control over the personal information collected through cookies and other tracking technologies and can choose your preferences about their use. You will be presented with a notice on your first visit to the Services asking you to choose your preferences.
Details
What it does
Choose your cookie preferences
When
Upon your first visit to the Services
Supporting quotations
You have control over the personal information you wish for us to collect through cookies and other tracking technologies and have the ability to choose your preferences with regard to our use of cookies and technologies in your interactions with our Services.
You will be presented with a notice upon your first visit to our Services asking you to choose your preferences.
Qualifications & exceptions
The notice appears on your first visit to the Services.
Not stated here
The policy does not say where to change preferences after that first notice, or how the notice works in each Service.
Data Access & Collection · User right or choice
Browsers can block or delete cookies, but blocking essential cookies breaks parts of the Services
The policy notes that most browsers let you block or delete cookies. It warns that blocking essential cookies will stop parts of the Services from working.
Details
What it does
Block or delete cookies in your browser
Supporting quotations
Most browsers also let you block or delete cookies.
Qualifications & exceptions
Browser controls depend on your browser; the policy says "most" browsers offer them.
Blocking essential cookies stops parts of the Services from working.
Not stated here
The policy does not say which parts of the Services stop working.
The policy gives the lists of cookies Anysphere uses on its Services, and says Anysphere may update these lists periodically.
Details
Who
Anysphere
What it does
May update the cookie lists periodically
Supporting quotations
Below is a list of the cookies we use on our Services. We may update these lists periodically.
Qualifications & exceptions
Applies to the lists of cookies below, not stated for the rest of the policy.
Not stated here
The policy does not say how updates will be announced, or whether a changed list triggers a new consent request.
Data Access & Collection · Context
The cookie lists give each cookie a one-word purpose that does not map to the three non-essential categories
Both cookie tables have the columns Source, Cookie name, Domain and Purpose. The purpose labels in the essential table are Functional, Security, Authentication, Localization, Load Balancing and Payments. The non-essential table uses Advertising, Analytics, Functional, Marketing and Authentication. The earlier text names the non-essential groups as functional, performance and targeting cookies, and says non-essential cookies can be enabled or disabled and that targeting cookies are used with advertising partners. The table labels never use "Performance" or "Targeting", so the policy does not say which listed cookies belong to which group.
Details
What it covers
Cookie lists with Source, Cookie name, Domain and Purpose columns
What it does
Enable or disable non-essential cookies at any time
Supporting quotations
Source Cookie name Domain Purpose
Source Cookie name Domain Purpose
You can enable or disable them at any time.
Targeting Cookies – used by us and our partners to track the effectiveness of specific ads on third-party properties
Qualifications & exceptions
Each table row carries one purpose label.
Not stated here
Which listed cookies are functional, performance or targeting cookies is not stated; a reader can only infer it from the labels, and the policy does not make that mapping.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Essential list: Anysphere sign-in and security cookies
Four of the essential cookies are Anysphere's own cookies for signing in or security on cursor.com: csrf-token (Security), WorkosCursorSessionToken, WorkosCursorReturnTo and WorkosCursorAuthNonce (all Authentication). Essential cookies are the ones the policy says cannot be disabled and are set without a consent request.
Details
Who
Anysphere
What it covers
csrf-token, WorkosCursorSessionToken, WorkosCursorReturnTo, WorkosCursorAuthNonce on cursor.com
Listed as essential, so the policy's no-disable and no-consent-request statements for essential cookies apply to them.
Not stated here
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Cross-references
contrast (model-proposed): Non-essential list includes an Authentication cookie and a team API key cookie — The essential table lists Authentication cookies that cannot be disabled, while the non-essential table, which the policy says can be disabled at any time, also lists an Authentication cookie; the policy does not explain the difference.
Data Access & Collection · Company practice
Essential list: Anysphere cookies labelled Functional, including integration and team entries
Eleven essential cookies set by Anysphere on cursor.com are labelled Functional: cursor-web-target-synced-user, WorkosCursorForceLogin, WorkosCursorSsoBounceNonce, github_cursor_code, azure_devops_cursor_code, linear_cursor_state, pagerduty_cursor_state, sentry_cursor_state, bitbucket_cursor_code, WorkosCursorSuperGrokNonce and portal-selected-team-id. The policy lists them as essential.
Listed as essential, so they cannot be disabled and no consent is asked for.
Not stated here
The one-word label Functional does not say what each cookie stores or does; the policy does not explain the integration-named cookies.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Data Access & Collection · Company practice
Essential list: Anysphere language and locale cookies
Four essential Anysphere cookies on cursor.com are labelled Localization: generaltranslation.referrer-locale, generaltranslation.locale-routing-enabled, generaltranslation.locale and generaltranslation.locale-reset.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Sharing & Disclosure · Company practice
Essential list: Cloudflare, Google Cloud and Stripe cookies
Four essential cookies come from sources other than Anysphere: Cloudflare's __cf_bm (Security, domain .cursor.com), Google Cloud's GCLB (Load Balancing, cursor.com), and Stripe's __stripe_mid and __stripe_sid (Payments, cursor.com).
Details
Who
Cloudflare, Google Cloud, Stripe
Why
Security, load balancing and payments
Supporting quotations
Cloudflare __cf_bm .cursor.com Security
Google Cloud GCLB cursor.com Load Balancing
Stripe __stripe_mid cursor.com Payments
Stripe __stripe_sid cursor.com Payments
Qualifications & exceptions
Listed as essential, so they cannot be disabled and no consent is asked for.
Not stated here
The policy does not say what Cloudflare, Google Cloud or Stripe receive through these cookies, or point to their terms.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Data Access & Collection · Company practice
Non-essential list: Anysphere functional, analytics and marketing cookies
Ten non-essential cookies are Anysphere's own. Six are labelled Functional (logoCountry, team_id, cursor-web-target, x-cursor-canary, cursor_agents_rail_nav, CursorReviewEligibilityVerdict), two Analytics (cursor_anonymous_id, _ca_device_id on .cursor.com), one Marketing (cursor_marketing_attribution_storage_allowed) and one Advertising (cursor_marketing_attribution). The policy says non-essential cookies can be enabled or disabled.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Account & Service Control · Context
Non-essential list includes an Authentication cookie and a team API key cookie
The non-essential table lists workos_id (labelled Authentication) and team_api_key (labelled Functional), while the essential table lists other Anysphere cookies labelled Authentication, such as WorkosCursorSessionToken. The policy says non-essential cookies can be enabled or disabled at any time. It does not explain why these two are non-essential or what changes if they are disabled.
Details
Who
Anysphere
What it covers
workos_id and team_api_key, compared with WorkosCursorSessionToken in the essential list
Listed in the non-essential table, so the policy's disable-at-any-time statement applies to them as written.
Not stated here
Source ambiguity: the policy gives no reason these are non-essential and no effect of disabling them. Nothing is inferred here.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Cross-references
contrast (model-proposed): Essential list: Anysphere sign-in and security cookies — The essential table lists Authentication cookies that cannot be disabled, while the non-essential table, which the policy says can be disabled at any time, also lists an Authentication cookie; the policy does not explain the difference.
Sharing & Disclosure · Company practice
Non-essential list: Google cookies for analytics and advertising
Thirteen non-essential cookies are listed with the source Google Ads. Three are labelled Analytics (_sgtm_pm, _ga_5H6JBHFD7Z, _ga) and ten Advertising (_gcl_au, ar_debug, DSID, IDE, __Secure-<ID>, NID, _gcl_ag, _gcl_aw, _gcl_gb, _gcl_gs). Most sit on cursor.com; ar_debug, DSID and IDE are on doubleclick.net, and __Secure-<ID> and NID are on google.com.
Details
Who
Google
Why
Analytics and advertising
Supporting quotations
Google Ads _sgtm_pm cursor.com Analytics
Google Ads _gcl_au cursor.com Advertising
Google Ads _ga_5H6JBHFD7Z cursor.com Analytics
Google Ads _ga cursor.com Analytics
Google Ads ar_debug doubleclick.net Advertising
Google Ads DSID doubleclick.net Advertising
Google Ads IDE doubleclick.net Advertising
Google Ads __Secure-<ID> google.com Advertising
Google Ads NID google.com Advertising
Google Ads _gcl_ag cursor.com Advertising
Google Ads _gcl_aw cursor.com Advertising
Google Ads _gcl_gb cursor.com Advertising
Google Ads _gcl_gs cursor.com Advertising
Qualifications & exceptions
Listed as non-essential and under the source name Google Ads, even for the analytics-labelled cookies.
Not stated here
The policy does not say what data Google receives through these cookies or point to Google's terms.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Data Access & Collection · Company practice
Non-essential list: Hightouch analytics cookies
Three non-essential cookies on .cursor.com are listed with the source Hightouch and the purpose Analytics: htjs_anonymous_id, htjs_user_id and htjs_sesh.
Details
Who
Hightouch
Why
Analytics
Supporting quotations
Hightouch htjs_anonymous_id .cursor.com Analytics
Hightouch htjs_user_id .cursor.com Analytics
Hightouch htjs_sesh .cursor.com Analytics
Qualifications & exceptions
Listed as non-essential.
Not stated here
The policy does not say what Hightouch does with the data collected through these cookies.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Sharing & Disclosure · Company practice
Non-essential list: LinkedIn, Meta and Microsoft advertising cookies
Nine non-essential cookies are labelled Advertising: five from LinkedIn Ads (AnalyticsSyncHistory, bcookie, li_sugr, lidc, UserMatchHistory, all on linkedin.com), two from Meta Ads (_fbp, _fbc on cursor.com) and two from Microsoft Ads (uet_vid, uet_msclkid on cursor.com).
Listed as non-essential, so the policy's disable-at-any-time statement applies.
Not stated here
The policy does not say what these companies receive through these cookies.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Sharing & Disclosure · Company practice
Non-essential list: Reddit and Snapchat advertising cookies
Eight non-essential cookies are labelled Advertising: four from Reddit Ads (_rdt_uuid and _rdt_cid on cursor.com, csv and loid on reddit.com) and four from Snapchat Ads (_sctr, _scid_r and _scid on cursor.com, sc_at on snapchat.com).
Details
Who
Reddit, Snapchat
Why
Advertising
Supporting quotations
Reddit Ads _rdt_uuid cursor.com Advertising
Reddit Ads csv reddit.com Advertising
Reddit Ads loid reddit.com Advertising
Reddit Ads _rdt_cid cursor.com Advertising
Snapchat Ads _sctr cursor.com Advertising
Snapchat Ads _scid_r cursor.com Advertising
Snapchat Ads _scid cursor.com Advertising
Snapchat Ads sc_at snapchat.com Advertising
Qualifications & exceptions
Listed as non-essential, so the policy's disable-at-any-time statement applies.
Not stated here
The policy does not say what these companies receive through these cookies.
The policy does not say what each cookie stores or how long it lasts; the lists give only source, name, domain and a one-word purpose.
Sharing & Disclosure · Company practice
Non-essential list: StackAdapt and TikTok advertising cookies
Nine non-essential cookies are labelled Advertising: four from StackAdapt Ads (user-id, user-id-v2, sa-camp-<ID> and sa_aid_pv, all on srv.stackadapt.com) and five from TikTok Ads (ttcsid_D727A8BC77U33845DVA0, ttcsid, _ttp, _tt_enable_cookie and ttclid, all on cursor.com).