This document serves to fulfill our obligations under data protection laws, notably the General Data Protection Regulation (GDPR) (EU) 2016/679, which concerns the protection of individuals with respect to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC.
This policy outlines the manner and terms on which we process your personal data upon your interaction with our services or during communications with us.
Further details regarding the processing of your personal data during any purchase will be provided at the point of sale and can also be found in this document.
Data Controller
The data controller of your personal information us, Cursorful: Luca Dalli, address: 16, Spring, Triq il-Gardell, Mellieha, Malta.
For all queries related to our services or the processing of your personal data, please contact us at support@cursorful.com.
Sources of Personal Data
We collect your personal information directly from you through the following interactions:
- You send us questions or request for an offer.
- You are browsing our website.
- You use our application.
- You purchase a license.
- You create an account on our website.
Personal Data Processing
During your visit to our website, we process basic data such as your IP address. Additionally, personal data such as your name, surname, telephone number, and email address are processed when you contact us.
We process necessary personal data for account registration on our website when you choose to create an account.
Basic user data related to how you use our application are collected upon your consent.
Purposes of Data Processing
We process your personal data to offer electronic services including website content delivery, account registration, license purchases, and for analytical and statistical purposes.
Your data is also processed to respond to inquiries and to provide offers of our services.
Data is processed, when necessary, to establish, pursue or defend against claims.
We collect usage data to monitor and enhance our application, which helps in making development decisions regarding application features and pricing strategies. This information is always aggregated and anonymized.
Data processing also occurs in the event of an application error to help in product development and to prevent future errors. This includes collecting log data such as IP address, device name, operating system version, app configuration during use, usage time and date, and other statistics.
Legal Basis for Data Processing
- For providing electronic services on our website, the legal basis is the necessity to perform a contract (Article 6(1)(b) GDPR).
- For responding to inquiries, the legal basis is our legitimate interest in informing about our activities (Article 6(1)(f) GDPR), or to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
- For analytical, statistical, or marketing purposes, the legal basis is our legitimate interest in service development and marketing (Article 6(1)(f) GDPR).
- To establish, pursue or defend legal claims and ensure data security, the basis is our legitimate interest (Article 6(1)(f) GDPR).
- For collecting usage data, the legal basis is your consent (Article 6(1)(a) GDPR).
Data Retention Period
We process your personal data as long as necessary to fulfill the purposes outlined in this policy, including compliance with our contractual and legal obligations. If processing is based on your consent, your data is processed until you withdraw that consent, without affecting the lawfulness of processing before withdrawal.
Data Recipients
Your personal data may be shared with trusted subcontractors, including IT service providers for data hosting, business mail services, and companies providing us with statistical, analytical, and marketing tools.
Polar
In order to enable payments for our licenses we use the services of polar.sh, operated by Polar Software Inc., located in the United States, outside the European Economic Area. For the payment process you are redirected to the external checkout on polar.sh, on which the external privacy policy of this entity applies. Polar receives the email address and name you enter at checkout together with the purchase details (product, quantity, amount) and handles your payment details directly; we never receive your card or bank data.
Cloudflare
Our website and services are hosted on and protected by Cloudflare, Inc. (United States, outside the European Economic Area). Cloudflare Turnstile runs a silent bot check when you create an account, comment on or report a shared video; Cloudflare's bot protection may set the cookies listed in the cookie table below.
Dub (affiliate program)
We run an affiliate program through Dub (Dub Technologies, Inc., United States, outside the European Economic Area). When you visit our website through an affiliate's link, a Dub script records the click and stores a click identifier in a first-party cookie on your device (see the cookie table below). If you later make a purchase, that identifier is passed to our payment provider and to Dub so the referring affiliate can be credited for the sale. Dub receives the click identifier, the purchase amount and, to attribute the sale, the name and email address used at checkout; it does not receive your payment details.
Voluntary Data Provision
Providing your personal data is voluntary, although some data may be necessary to use our services. Not providing mandatory data may impede your ability to fully utilize our services.
Additional Information
Your data may be processed outside the European Economic Area by our subcontractors in the United States. This processing is covered by standard contractual clauses or other mechanisms ensuring adequate protection.
Security Measures
We strive to protect your personal information using commercially acceptable security measures. However, no electronic data transmission or storage method can be guaranteed to be 100% secure.
Children's Privacy
We do not knowingly collect personal information from children under 13. If we learn a child under 13 has provided us with personal information, we will delete it. If you believe your child has provided such information, please contact us immediately.
Your Rights
You have various rights regarding the processing of your personal data, including access to data, rectification, restriction of processing, deletion, data portability, objection to processing, and withdrawal of consent. You also have the right to lodge a complaint with a supervisory authority if your data protection rights are violated.
Request Processing
Requests for exercising your rights will be addressed within one month. If an extension is required, you will be informed of the reasons for the delay.
External Links
This Privacy Policy does not cover external websites linked from our site. Please review the privacy policies of any external sites you visit.
Cookie Information
About Cookies
Cookies are text files stored on your device that are unique to your browser or application, containing identifiers and other data which can only be read by the creating server.
Essential Cookies
Essential cookies are necessary for our website's operation and cannot be disabled without affecting functionality. These cookies are set in response to actions you take, such as setting privacy preferences or logging in.
Cookie Data Use
Essential cookies do not store personal information and are used only to provide requested services.
Cookie Retention
While essential cookies are generally session cookies, some may be retained longer to remember your preferences across visits.
| Type of Cookie | Name | Expiration Time | Purpose |
|---|---|---|---|
| Essential | __Secure-better-auth.session_token | 7 days | Keeps you signed in to your Cursorful account; set when you sign in and refreshed while you keep using the site. |
| Essential | cf_clearance, __cf_bm | Up to 30 minutes | Set by Cloudflare's bot protection when it verifies your browser (including the Turnstile checks on the sign-up, comment and "Report this video" forms); remembers that your browser passed so it is not challenged again. |
Non-Essential Cookies
We also use a non-essential cookie for our affiliate program. Below is a table detailing it, its purpose, and retention period. We do not run Google Analytics, Google AdSense or any other third-party analytics or advertising cookies on our website.
| Type of Cookie | Name | Expiration Time | Purpose |
|---|---|---|---|
| Marketing | dub_id | 90 days | Set by Dub when you arrive via an affiliate link; identifies the referring click so a later purchase can be attributed to the affiliate. |
Managing Cookie Settings
You can learn how to manage cookie settings in various browsers from the following sources:
Analytics and Marketing Tools
Dub
Dub's affiliate tracking script runs on our marketing pages (the homepage, install, welcome and affiliate pages — not in the editor, on shared videos or in your account area) and sets the dub_id cookie when you arrive through an affiliate link, as further detailed in Part I of this Policy. It is used solely to credit affiliates for purchases they referred.
Final Provisions
This Privacy and Cookies Policy is subject to periodic review and updates as necessary. The most recent update was published on 04.09.2026.