Privacy Policy

Effective date: May 5, 2026

This Privacy Policy explains how Cursor Craft collects, uses, stores, and protects personal data when you use Cursor Craft, our website, and related services. We limit collection: account details from Google sign-in (name, email, avatar), purchase-related records, and analytics/crash data to improve the product—described in detail below.

1. Controller

The data controller is:

Company / Developer: Cursor Craft
Email: privacy@cursor-craft.app
Website: https://cursor-craft.app

If you have questions about this Privacy Policy or your personal data, contact us at privacy@cursor-craft.app.

2. Personal Data We Collect

We do not collect broad profiling data about you. Processing is limited to the following:

Account sign-in (Google)

If you create or access an account using Google sign-in, we receive only what Google shares with us for authentication—typically your name, email address, and profile picture (avatar)—to create and maintain your account.

Purchase information

If you buy paid content, we process purchase-related records needed to deliver what you bought and to meet legal and accounting obligations (for example, what was purchased, transaction identifiers, payment status, and billing region or tax details where required).

When you start a checkout from our website, we also forward your approximate country (and, where available, postal code) to the payment processor so the hosted checkout page can pre-fill those fields and so the correct sales tax or VAT can be calculated. This information is derived from your IP address by our content delivery provider ( Cloudflare) and is used only for billing, tax, and fraud-prevention purposes.

Payment card details are handled only by our payment processor(s) (for example Lemon Squeezy, depending on checkout). We do not store your full payment card number on our servers.

Analytics and crash logs

We collect analytics and crash or error diagnostics to improve stability and behavior of Cursor Craft and related services. Reports may include technical details sent automatically with those events (for example, app version or operating system version).

Support messages

If you contact us (for example by email), we process the information you choose to send.

Website visits

If you visit our website, limited technical or analytics data may be processed through cookies or similar technologies, as described in Section 5.

3. How We Use Personal Data

We use personal data to:

• Provide sign-in and your account (using the Google profile fields above);
• Process purchases and deliver free or paid cursor content;
• Run analytics and review crash logs to improve app behavior and reliability;
• Respond to support requests;
• Prevent fraud, abuse, and unauthorized access where proportionate;
• Comply with tax, accounting, legal, and regulatory obligations;
• Send service-related messages when necessary.

We send marketing messages only where legally permitted or where you have consented.

4. Legal Bases for Processing

If GDPR applies, we process personal data under the following legal bases:

• Contract: to provide the app, purchases, licenses, and support;
• Consent: for optional analytics, marketing, or cookies where required;
• Legal obligation: for tax, accounting, and compliance requirements;
• Legitimate interests: to secure and run the service, prevent fraud, and use analytics and crash diagnostics to improve app behavior, provided your rights do not override those interests.

5. Cookies and Analytics

Our website or app may use cookies, local storage, or similar technologies.

We use analytics (such as Google Analytics where configured) together with crash diagnostics to measure reliability and improve how the app and site work—not to build unrelated profiles about your personal life.

Where legally required, we will ask for your consent before using non-essential cookies or analytics.

6. Payment Providers

Depending on your region and checkout flow, payments are processed by Lemon Squeezy acting as Merchant of Record for the sale. Lemon Squeezy may collect and process payment details, billing and contact information, device and fraud-prevention signals, transaction records, and tax-related data to complete purchases and meet legal obligations. To support pre-filling the checkout and calculating applicable sales tax or VAT, we also forward the approximate country (and, where available, postal code) derived from your IP address by our content delivery provider ( Cloudflare) when a checkout session is created.

Lemon Squeezy privacy policy: Privacy policy

We do not store your full payment card number on our servers.

7. Sharing Personal Data

We may share personal data with:

• Lemon Squeezy and its payment partners (for checkout and tax/MoR compliance);
• Cloudflare (for content delivery, security, and the approximate country/postal-code location used at checkout);
• Hosting or infrastructure providers that run our services;
• Analytics and crash-reporting providers that help us improve the app;
• Professional advisors (tax, legal, accounting) when needed;
• Authorities where legally required.

We do not sell your personal data.

8. International Transfers

Some service providers may process personal data outside your country.

Where GDPR applies and personal data is transferred outside the European Economic Area, we use appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

9. Data Retention

We keep personal data only as long as necessary for the purposes described in this Privacy Policy.

Typical retention periods:

• Google account fields (name, email, avatar): while your account is active;
• Purchase records: as required for fulfillment and tax/accounting law;
• Analytics and crash logs: for a limited time needed to diagnose and improve the product;
• Support messages: long enough to resolve your request and maintain reasonable records;
• Marketing data: until you unsubscribe or withdraw consent.

10. Your Rights

Depending on your location, you may have rights to:

• Access your personal data;
• Correct inaccurate personal data;
• Delete your personal data;
• Restrict processing;
• Object to processing;
• Receive a copy of your data in portable format;
• Withdraw consent at any time;
• Lodge a complaint with a data protection authority.

To exercise your rights, contact us at privacy@cursor-craft.app.

If you are in the EU, you may contact your local data protection authority.

11. Children’s Privacy

Cursor Craft is not designed for children under 13, and we do not knowingly collect personal data from anyone under 13.

If you believe someone under 13 has provided us personal data, contact us at privacy@cursor-craft.app and we will take appropriate steps.

12. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

However, no system is completely secure.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a new effective date.

14. Contact

For privacy questions, contact:

privacy@cursor-craft.app