HN Explorer

Tell HN: Cursor exposes side projects to your employer

35 points by throwawaybbbbbb ↗ HN
I went to see my Cursor (the AI IDE) analytics and clicked a banner advertising their new company-level analytics dashboard. It now has a section “AI Edits by repository” that includes all the repositories used with Cursor, including your personal side projects. [0] I suspect they scrape the name of the repository from the list of GIT remotes, without explicit consent or notice.

If you're using Cursor with a company (teams, enterprise) subscription, information of all your code commits is sent to their API. This telemetry cannot be disabled and is available in a highly granular format in their API. [1]

The dashboard includes also includes information on when you were writing code. [2] The data is available in a highly granular format in their API. [3]

[0]: https://cursor.com/docs/account/teams/analytics#repository-insights [1]: https://cursor.com/docs/account/teams/ai-code-tracking-api#get-ai-commit-metrics-json-paginated [2] https://cursor.com/docs/account/teams/analytics#daily-usage [3] https://cursor.com/docs/account/teams/ai-code-tracking-api#get-ai-code-change-metrics-json-paginated

15 comments

[ 2.6 ms ] story [ 34.3 ms ] thread
Iolaum
Am I wrong in understanding you were using the company account with the enterprise subscription while you were working on those side projects? Or were you using a different account?
speedgoose
If you can’t trust your company with your side projects, you should perhaps not do side projects on your company provided computer and AI subscriptions.
giantg2
"If you're using Cursor with a company (teams, enterprise) subscription, information of all your code commits is sent to their API."

Yeah... get your own personal subscription. Creating side projects on company resources could lead to ownership disputes - you could lose it to your company.

muzani
Well, they are paying for the tokens, so it's only fair. If you were on the company phone, they should see who you're calling.
codegeek
"If you're using Cursor with a company (teams, enterprise) subscription, information of all your code commits is sent to their API."

Good. As much as we are all privacy freaks, if you are using company resources to do your own side projects, it is fair that the company should have visibility to it. Otherwise, get a separate personal subscription.

Note that you should not only have a separate subscription to things like cursor for non company work, you should also have a separate laptop/machine for doing anythng non company. One of the reasons why so many companies are cracking down on remote work is due to these types of violations in addition to other things.

bitbasher
Cursor didn't expose it, you did when you decided to use Cursor. You're using an editor that is owned by a company with analytics built in. You're handing over your data.

Stop using company hardware, software and subscriptions to do _anything_ personal.

al_borland
Why are you using your company account for personal projects?
[deleted]
(comment deleted)
iExploder
Legal and HR department would like to have a word.
kylehotchkiss
Software developers should generally have their own computers that aren't wired into company subscriptions. M-Series MacBook Air is really all most people could ever need.
satvikpendem
Well yeah, you're using company hardware and software for personal use, of course they'd be able to see.
ifh-hn
I find it hard to see how this isn't user error? Don't use company hardware and software... Problem solved.
suobset
This is why please have a personal account and personal devices for anything that does not relate to your company or work. This is super critical.

Heck I'd often carry 2 devices if I was traveling, there's no way in hell I would use company laptops. Anything I did on my work Mac, I assumed everyone relevant at work can access into. Kandji already hands over a ton of data wrt this, and I am sure every other MDM solution does too.

You gave your consent when you got the work device and probably signed a document/stated that this was to only be used for work purposes.

greekcoder
If you're good to your job and your manager find out you're building a side project, they may think you prepare to leave so you might take a salary raise for not leaving. Let's take the risk and continue using company's AI accounts, they are Free!