Cursor has no privacy mode whatsoever. I have been able to exfiltrate just about anything from it.