· dev

Cursor vs GitHub

On what the policies say, Cursor is the better choice for your data: graded D against GitHub's F.

Grades read the plan most people are on. Each company's full entry has every plan, every clause and the archived copy it was read from.

Cursor

With Privacy Mode off, Cursor trains on your codebase, prompts and editor actions. The switch is free on every plan — but you have to find it.

Verdict

By default: Trains on you by default
The way out: A self-serve opt-out exists
What D means: On by default. An opt-out exists, but you have to go looking for it.
Last checked: 5 Oct 2026

Read the full verdict →

GitHub

GitHub uses your code, inputs and AI outputs to develop and train AI/ML models by default, with no self-serve opt-out stated in its privacy statement.

Verdict

By default: Trains on you by default
The way out: No opt-out in the policy
What F means: On by default, with no way out on the plan you are on — and nothing short of reading the terms would have told you.
Last checked: 5 Oct 2026

Read the full verdict →

Cursor: every plan

Cursor · what each plan can refuse · checked 5 Oct 2026

1 PLAN

Plan

Exposure

Trains

Opt-out path

Retention

De-identified

Human review

All plans (free and Pro)

53 / 100

YES

Self-serve toggle

Not stated

Unknown

How the score is made53 / 100 · the rubric

Default32 / 50

On by default, with a way out

Way out15 / 33

One switch, but the policy never says which way it ships

Paywall0 / 4

No paywall on the control

Scope2 / 4

3 kinds of data are in scope

Human review2 / 4

The policy does not say whether people read it

De-identified2 / 2

Nothing is said about de-identification

EVERY CELL ABOVE IS SOURCED FROM A QUOTED CLAUSE OR A DOCUMENTED SEARCH · SEE THE EVIDENCE ABOVE

EXPOSURE IS SCORED 0–100 ON ONE AXIS, HOW HARD IT IS TO STOP THIS PLAN TRAINING ON YOU. THE GRADE IS THE BAND IT FALLS IN: A 0–10 · B 11–25 · C 26–45 · D 46–60 · E 61–80 · F 81–100. HOW THE SCORE IS SET

All plans (free and Pro)TRAINS: YES

OPT-OUT: Self-serve toggle
RETENTION: Not stated
EXPOSURE: 53 / 100
DE-IDENTIFIED: Not stated
HUMAN REVIEW: Unknown

GitHub: every plan

GitHub · what each plan can refuse · checked 5 Oct 2026

2 PLANS

Plan

Exposure

Trains

Opt-out path

Retention

De-identified

Human review

Individual accounts (all plans)

86 / 100

YES

None offered

Not stated

Qualified

Unknown

How the score is made86 / 100 · the rubric

Default50 / 50

On by default, with no way out on this plan

Way out33 / 33

No route to refuse is stated

Paywall0 / 4

No paywall on the control

Scope0 / 4

One kind of data is in scope

Human review2 / 4

The policy does not say whether people read it

De-identified1 / 2

De-identification is promised with a qualifier

Organization-provided accounts (Enterprise/Business)

UNCLEAR

Not established, see below

Not stated

—

Not established

EVERY CELL ABOVE IS SOURCED FROM A QUOTED CLAUSE OR A DOCUMENTED SEARCH · SEE THE EVIDENCE ABOVE

Individual accounts (all plans)TRAINS: YES

OPT-OUT: None offered
RETENTION: Not stated
EXPOSURE: 86 / 100
DE-IDENTIFIED: Qualified
HUMAN REVIEW: Unknown

Organization-provided accounts (Enterprise/Business)UNCLEAR

OPT-OUT: Not established
RETENTION: Not stated
EXPOSURE: —
DE-IDENTIFIED: —
HUMAN REVIEW: Not established

Every grade on this page is the one on the company's own entry, read from a dated, archived copy of its policy. Nothing here is computed separately. How grades are set · All comparisons