Sessions Pro for Cursor
This policy explains what personal data we process when you visit cursorsessions.com, buy Sessions Pro for Cursor, or use the app, and what rights you have. We keep it short because we collect very little: the app never reads or sends your code, Cursor chats, sign-ins or files.
Who we are
The controller is LEX GLOBAL IT S.R.L., DN17 nr 268B, Romania, registered with the Trade Register under no. J2018000908068, fiscal code (CUI) 39743639. Contact: contact@cursorsessions.com.
What we process, why, and for how long
| Data | Purpose and legal basis | Kept |
|---|---|---|
| Website visits: IP address, browser user agent, page requested, time | Operating and securing the website (server logs, rate limiting). Legitimate interest, Art. 6(1)(f) GDPR. | 14 days |
| Anonymous visit counts made from those server logs: page, referring site, browser and device type, country (looked up from the IP address with the DB-IP database on our own server). No cookie, and no IP address is kept: visitors are told apart with a one-way code that changes every day | Knowing how many people visit and where they come from, without a cookie banner. Legitimate interest, Art. 6(1)(f) GDPR. | Totals per day as long as we run the site; individual visits only while the logs exist (14 days) |
| Purchase: name, email, billing country and address, VAT ID if given, amount, currency, Stripe payment references | Selling you a licence, delivering the key and providing support. Performance of a contract, Art. 6(1)(b). Issuing invoices and keeping accounting records. Legal obligation, Art. 6(1)(c). | For the life of the licence; invoices and accounting records as long as Romanian law requires (currently up to 10 years) |
| Licence activation: licence key, an anonymous ID for each computer (a one-way SHA-256 hash of its hardware ID), the computer's name (e.g. "Ana's MacBook Pro"), activation and last-check dates | Checking that a licence is valid, keeping to the number of computers it covers (2, plus any extra computers you add) and letting you see and deactivate your computers. Performance of a contract, Art. 6(1)(b). | For the life of the licence |
| Preview: the anonymous computer ID and the time its free preview started | Giving each computer one free preview. Legitimate interest, Art. 6(1)(f). | Up to 24 months |
| Emails you send us and our replies | Support. Legitimate interest or contract, Art. 6(1)(b)/(f). | As long as needed to resolve your request, then up to 24 months |
The app stores your accounts' data, sign-ins, chats, settings and extensions only on your computer, in each account's own folder. It contacts our server only to start your free preview and to activate and check your licence (our web server logs the request: IP address, app version and time, like any website visit). To show whether an account is signed in, it checks on your computer whether a Cursor sign-in is present. If you use the usage meter, it reads each account’s Cursor sign-in on your computer and uses it only to ask Cursor for that account’s usage; the sign-in is never sent to us and nothing is stored. Nothing else about you is sent. Your use of Cursor is between you and Anysphere and is covered by Cursor's privacy policy.
Who processes data for us
- Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA): payment processing. Your card details go to Stripe directly; we never see them.
- Hostinger (Hostinger International Ltd.): hosts our server in Frankfurt, Germany.
- Google (Google Ireland Ltd. / Google LLC): sends your licence and receipt emails (Gmail) and stores a daily backup of our server (Google Drive; only the latest copy is kept).
- SmartBill (Intelligent IT S.R.L., Romania): issuing invoices.
Stripe and Google may process data in the United States. These transfers rely on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
Cookies
cursorsessions.com sets no cookies and has no cookie banner: visits are counted anonymously on our own server from its logs (see the table above). We use no advertising trackers, and fonts and images are served from our own server. Stripe's checkout page sets its own cookies when you pay; see Stripe's privacy policy.
Your rights
Under the GDPR you can ask for access to, correction or deletion of your data, restriction of or objection to processing, and a copy of your data in a portable format. Email contact@cursorsessions.com; we answer within one month. Deleting your licence data ends the licence. Invoices we must keep by law are retained until the legal period ends. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or the authority where you live.
Children
Sessions Pro for Cursor is not directed at children under 16, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date at the top. Material changes will be announced on this page.