“Cursor's current privacy policy is to not store any user code beyond the duration of a single request.”