Most Microsoft sites use cookies for settings, sign-in, ads and analytics
Microsoft says most of its sites place cookies, small text files that the site can read back later. It uses them to store your preferences and settings, help with sign-in, provide personalized ads and analyze how the sites operate. This opening paragraph only summarizes; the statement points to its Cookies and similar technologies section for the full explanation.
Supporting quotations
Most Microsoft sites use cookies
We use cookies to store your preferences and settings, help with sign-in, provide personalized ads, and analyze site operations.
Qualifications & exceptions
The paragraph says "most" Microsoft sites, not all.
Full detail is in the Cookies and similar technologies section.
Data Access & Collection · Company practice
Microsoft collects data you give, data from your use, and data from affiliates and third parties
Microsoft collects data from you through your interactions with it and your use of its products. Some of this you provide directly; other data it gathers from how you interact with and use the products. It also obtains data about users from Microsoft affiliates, subsidiaries and third parties. How much and what kinds of data it collects depends on the context of your interactions, the choices you make (including privacy settings), and the products and features you use, as well as applicable law. The stated purpose is to operate, improve and provide the products.
Supporting quotations
Microsoft collects data from users, through your interactions with us and your use of our products.
We also obtain data about users from Microsoft affiliates, subsidiaries, and third parties.
We collect data in order to operate, improve, and provide you with the best possible experiences.
The types and amount of data we collect depend on how you interact with Microsoft, your choices, privacy settings, and the features you use, as well as applicable law.
Qualifications & exceptions
The amount and type of data depends on context, your choices, privacy settings, features used and applicable law.
Not stated here
The overview does not list which third parties supply data; the following section lists source types.
Data Access & Collection · User right or choice
You can decline to provide data, but required data is needed to use a product or feature
When Microsoft asks for personal data you can decline, and you can use in-product controls, including those in your browser or operating system, to limit or prevent certain types of collection. The trade-off is stated plainly: many products need some personal data to provide a service, so if you do not provide or allow collection of required data you cannot use the related product or feature. If Microsoft needs data by law, or to enter into or carry out a contract with you, and you do not provide it, it will not be able to enter into or carry out the contract. If the data is optional and you do not share it, features such as personalization that rely on it will not work for you.
Supporting quotations
When we ask you to provide personal data, you can decline.
You can also use in-product controls, including those in your web browser or operating system to limit or prevent certain types of data collection.
If you choose not to provide or allow us to collect required data, you cannot use the related product or feature.
where we need to collect personal data by law or to enter into or carry out a contract with you, and you do not provide the data, we will not be able to enter into or carry out the contract
features like personalization that use such data will not work for you
Qualifications & exceptions
The choice is limited to "certain types" of collection, not all collection.
Declining required data means losing access to the related product or feature, or the contract.
Optional data you withhold mainly affects features like personalization.
Data Access & Collection · Company practice
Contact, sign-in, demographic, payment and subscription data are collected
The statement lists several kinds of data about you and your account that Microsoft can collect: your name and contact details (name, email, mailing address, phone), account credentials (username, password and password hints), demographic data (age, gender, country, language preference), payment data (including credit card numbers and security codes) and subscription and licensing data. The list says these are things data collection "can include", so it is a list of possible categories rather than a promise that every product collects all of them.
Supporting quotations
The data we collect can include the following:
Your first and last name, email address, mailing address, phone number, and other similar contact details.
Information used to access your account, such as username, password, and password hints.
Details about you like your age, gender, country, and language preference.
Details needed to process payments, including credit card numbers and security codes.
Details about your product subscriptions, licenses, and other entitlements.
Qualifications & exceptions
Introduced as "can include", so not every product collects every category.
Data Access & Collection · Company practice
Product use, device details, browsing history and error reports are collected
Microsoft lists data about how you use its products and about your device. This includes the features you use, your searches and commands, error reports and support requests; hardware and software details, product performance, interactions with its websites and apps, and your settings; payment and account history; and browsing history. Device data includes IP addresses, device identifiers, nearby networks and information about installed operating systems and software. Error reports ("crash dumps") usually include software, hardware and file content details related to the error, and other software on your device.
Supporting quotations
Information about your use of Microsoft products, including features you use, searches, commands given, error reports, and support requests.
Data about your device and product features you use, hardware and software details, product performance, your interactions with our websites and apps, and your settings.
Payment and account history.
Browsing history.
For example, IP addresses, device identifiers, nearby networks, and other information about the operating systems and other software installed on your device.
This usually includes software, hardware, and file content details related to an error, and other software on your device.
Qualifications & exceptions
The statement presents these as examples within the device and usage data category.
Crash dumps can include file content details related to the error.
Data Access & Collection · Company practice
Support calls and chats may be monitored and recorded; bot usage is collected
When you contact Microsoft for help, it collects the contact or authentication data you give, the content of your communications with Microsoft, the condition of your device, the products involved and other details that help it provide support. The statement says phone conversations or chat sessions with its representatives may be monitored and recorded. Separately, it collects your interactions with bots and skills available through Microsoft products, including bots and skills provided by third parties.
Supporting quotations
Data you provide when you contact Microsoft for help.
the content of your communications with Microsoft
Phone conversations or chat sessions with our representatives may be monitored and recorded.
Interactions with bots and skills available through Microsoft products, including bots and skills provided by third parties.
Qualifications & exceptions
"May be monitored and recorded" is permissive; the text does not say when or in which cases it happens.
Not stated here
The text does not say how long support recordings are kept or who can access them.
Data Access & Collection · Company practice
Search queries, voice clips, typed and inked input, and images are collected
Microsoft collects the search queries and commands you give in its products (including chat bot interactions); voice data, also called voice clips, covering spoken queries, commands or dictation and possibly background sounds; text, inking and typing data you provide by typing, inking or touch; and images with related data such as picture metadata, for example an image you provide to a Bing image-enabled service or upload to Microsoft Copilot. The voice data entry links to a separate page about how voice data is used and protected, which is not supplied here.
Supporting quotations
Search queries and commands you provide in Microsoft products, such as interactions with a chat bot.
this includes spoken queries commands, or dictation, and may include background sounds
Data and related information you provide by typing, inking, or using touch input in Microsoft products.
Images and related data, like picture metadata.
upload an image to Microsoft Copilot
Qualifications & exceptions
Voice clips may include background sounds.
Not stated here
A linked page on how voice data is used and protected is not part of the supplied text.
Data Access & Collection · Company practice
Contacts, who you communicate with and when, and social interactions are collected
If you use a product to manage contacts, share information, communicate with others or improve your productivity, Microsoft collects data about your contacts and relationships. It also collects traffic data about your use of its communication services, including whom you have contacted and when, and social data such as likes, events and other engagement with others.
Supporting quotations
Data about your contacts and relationships if you use a product to manage contacts, share information or communicate with others, or improve your productivity.
Data about your use of Microsoft’s communication services, including whom you’ve contacted and when.
Information about your interactions and relationships with others, such as likes, events, and other types of engagement.
Qualifications & exceptions
Contacts data applies "if you use a product" for those purposes.
Data Access & Collection · Company practice
Precise and approximate device location data are collected
Microsoft collects data about your device's location. It may be precise, typically based on GPS, cell tower or Wi-Fi hotspot location, or imprecise, for example inferred from an IP address or from the city or postal code in your account profile. Location controls for apps are covered in a separate Location services section.
Supporting quotations
Data about your device’s location, which may be either precise (typically based on GPS, cell tower, or Wi-Fi hotspot location) or imprecise (for example, inferred from an IP address, or city or postal code in your account profile).
Qualifications & exceptions
Includes imprecise location inferred from an IP address or profile details.
Data Access & Collection · Company practice
Biometric data may be collected, depending on the product and your consent
Microsoft lists biometric data, meaning unique data from technical processing of your physical, physiological or behavioral characteristics to verify your identity, such as a fingerprint or facial recognition used to sign in to a Windows device through Windows Hello. It says its collection and use of biometric data depends on the products and features you use and on your consent, and points to a later Windows Hello section for more.
Supporting quotations
Unique data about you from specific technical processing related to your physical, physiological, or behavioral characteristics to verify or confirm your identity.
Our collection and use of biometric data depends on the products and features you use and your consent.
Qualifications & exceptions
Depends on the products and features used and on consent.
Data Access & Collection · Company practice
Event data, your files and messages, location recordings and feedback are collected
The list also covers other input (such as buttons pressed on an Xbox controller, other activity data, or information you give when registering for or attending an in-person event); content (information in files, messages, emails, chats, calls, meetings, photos, documents and other media you create or share using Microsoft products); video and audio recordings of events and activities at Microsoft buildings, retail spaces and other locations, which may include your image and voice; and feedback, survey answers and product reviews. The statement adds that product-specific sections describe the collection that applies to each product.
Supporting quotations
Data generated from using devices or participating in events, like buttons you press on an XBOX controller or other activity data, or information you provide when registering or attending an in-person event.
Information in files and messages, emails, chats, calls, meetings, photos, documents, and other media you create or share using Microsoft products.
Recordings of events and activities at Microsoft buildings, retail spaces, and other locations, which may include your image and voice data.
Information you provide in feedback, surveys, or product reviews.
Product-specific sections below describe data collection practices applicable to use of those products.
Qualifications & exceptions
Recordings at Microsoft locations may include your image and voice data.
Product-specific sections describe collection for particular products.
Data Access & Collection · Company practice
Microsoft also receives data from data brokers, partners and other third-party sources
Besides data from you, Microsoft receives data from its affiliates, subsidiaries and third parties. The listed sources include data brokers from which it buys demographic data and contact information to supplement what it collects; services that make user-generated content available, such as local business reviews or public social media posts; email providers and social networks when you give permission to access your data there; service providers that help determine your device location; joint marketing partners; developers and third parties that deliver experiences through Microsoft products; and publicly available sources such as open public sector, academic and commercial data sets. Microsoft says it protects data from third parties under the practices in this statement plus any added restrictions imposed by the source, and that the sources vary over time.
Supporting quotations
We protect data obtained from third parties according to the practices described in this statement, plus any additional restrictions imposed by the source of the data.
These third-party sources vary over time and include:
Data brokers from which we purchase demographic data and contact information to supplement the data we collect.
Services that make user-generated content from their service available to others, such as reviews of local businesses or public social media posts.
Communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks.
Service providers that help us determine your device’s location.
Partners with whom we engage in joint marketing activities.
Developers who create experiences through or for Microsoft products.
Third parties that deliver experiences through Microsoft products.
Publicly available sources, such as open public sector, academic, and commercial data sets.
Qualifications & exceptions
Data from communication services is obtained when you give permission to access your data on those services.
Third-party sources vary over time.
Data is protected under this statement plus any restrictions from the source.
Data Access & Collection · User right or choice
Closing reminder: you can decline or limit automatic data collection, with the same trade-offs
The Personal data we collect section ends by repeating the choice statement in slightly different words: you can decline when asked to provide personal data and can use browser, in-product or operating system controls to limit or prevent certain types of automatic data collection. Many products need some personal data to operate, so refusing required data means you cannot use that product or feature. Required-by-law and contract data are treated the same way, and withholding optional data stops features such as personalization from working.
Supporting quotations
When you are asked to provide personal data, you can decline.
to limit or prevent certain types of automatic data collection
If you choose not to provide or allow us to collect required data, you cannot use the related product or feature.
features like personalization that use the data will not work for you
Qualifications & exceptions
Same limits as the earlier choice statement: limiting applies to certain types of automatic collection.
Data Access & Collection · Company practice
Cookies, web beacons and pixels store settings, sign you in, secure, remember and measure
Microsoft uses cookies and similar technologies such as web beacons and pixels for storing and honoring your preferences and settings, letting you sign in, providing personalized advertising, combating fraud, analyzing product performance and other legitimate purposes. It lists uses: saving choices like language or ad preferences; verifying identity and keeping you signed in; protecting products and detecting fraud and abuse; remembering information you provide, such as shopping cart items; social media cookies on some websites that may let you share content if you are signed in to those services; letting you give feedback; gathering usage and performance data such as visitor counts; and helping understand how products work, such as load balancing and uptime. Microsoft apps also use additional identifiers, such as the Advertising ID in Windows.
Supporting quotations
We use cookies and similar technologies, such as web beacons and pixels, for storing and honoring your preferences and settings, enabling you to sign in, providing personalized advertising, combating fraud, analyzing how our products perform, and fulfilling other legitimate purposes.
Microsoft apps use additional identifiers, such as the Advertising ID in Windows, for similar purposes
We use cookies to store and save your choices – like language settings or your ad preferences – so you don’t need to set them again.
We use cookies to protect our products and detect fraud and abuse.
We use cookies to remember information you provide, such as items in your shopping cart.
Some of our websites include social media cookies, which may let you share content with social media services if you’re signed in with them.
We use cookies so you can give feedback on our websites.
We use cookies to gather usage and performance data, such as visitor counts and other statistics about our websites and products.
We use cookies to help us understand and improve how our products and websites work, like gathering data to help with load balancing and uptime.
Qualifications & exceptions
"Other legitimate purposes" is open-ended.
Social media cookies are on "some" websites.
Data Access & Collection · Company practice
Browser-identifying cookies serve operations and, with consent, advertising; one cookie stores profile details
Microsoft lists identifier cookies (MUID, MC1, MSFPC and ai_user) that identify unique web browsers visiting its sites; they are used for necessary operational purposes and, with consent, may also be used for advertising. A cookie called NAP contains an encrypted version of your country, postal code, age, gender, language and occupation, if known, based on your Microsoft account profile. A cookie called TOptOut records your decision not to receive personalized advertising delivered by Microsoft; where required, Microsoft places it by default and removes it when you consent to personalized advertising. The list is described as not exhaustive.
Supporting quotations
This list is not exhaustive, but it is intended to illustrate the primary purposes for which we typically set cookies.
Identifies unique web browsers visiting Microsoft sites.
With consent, these cookies may also be used for advertising.
Contains an encrypted version of your country, postal code, age, gender, language and occupation, if known, based on your Microsoft account profile.
Records your decision not to receive personalized advertising delivered by Microsoft.
Where required, we place this cookie by default and remove it when you consent to personalized advertising.
Qualifications & exceptions
Advertising use of identifier cookies depends on consent.
The list is illustrative, not exhaustive.
Data Access & Collection · Company practice
Third-party cookie types: social media, analytics, advertising and required cookies
The statement lists four types of third-party cookies. Social media cookies help Microsoft and third parties show ads and content tailored to your interests, based on your social media profiles and activity on Microsoft websites. Analytics cookies collect information on how you use the websites to help Microsoft improve them and to let third parties develop and improve their own products, and may also be used for advertising. Advertising cookies record which ads you saw, which you clicked and purchases made after clicking, and show you ads relevant to you, such as ads based on social media interests and website browsing history. Required cookies enable core website functions such as login, preferences, shopping carts, performance and security.
Supporting quotations
These cookies help us and third parties show you ads and content tailored to your interests, based on your social media profiles and activity on our websites.
Analytics cookies from third parties collect information on how you use our websites to help us improve them and allow third parties to develop and improve their own products. They may also be used for advertising purposes.
Advertising cookies record which ads you’ve seen, which ads you’ve clicked, or the purchases you’ve made after clicking.
like ads based on your social media interests and website browsing history
Required cookies enable core website functions, such as login, preferences, shopping carts, performance, and security.
Qualifications & exceptions
Analytics cookies from third parties may also be used for advertising.
Data Access & Collection · Company practice
Web beacons count visitors, track email opens and actions, and are placed on partner sites and ads
Some Microsoft webpages use electronic tags called web beacons to deliver cookies, count visitors and deliver products. Microsoft also uses web beacons or similar technologies in its communications to determine whether you open and act on them. It sometimes places web beacons on other companies' websites or ads to understand how interactions with Microsoft advertisements lead to actions such as purchases, or to learn about your activity on partner sites in connection with Microsoft products or services.
Supporting quotations
Some Microsoft webpages use electronic tags called web beacons to deliver cookies, count visitors, and deliver products.
We also use web beacons or similar technologies in our communications to determine whether you open and act on them.
We sometimes place our web beacons on other companies’ websites or ads to help us understand how interactions with Microsoft advertisements lead to actions, such as purchases, or to learn about your activity on partner sites in connection with Microsoft products or services.
Qualifications & exceptions
Beacons on other companies' sites are placed "sometimes".
Data Access & Collection · Company practice
Other local data files can store a unique identifier for your computer that can track behavior
Microsoft says its products can use other similar technologies to store and read data files on your computer, typically to maintain your preferences or to improve speed and performance by storing certain files locally. These technologies can also store a unique identifier for your computer, which can then track behavior. The text does not say how to control these technologies beyond the browser and product controls described elsewhere.
Supporting quotations
Our products can also use other similar technologies to store and read data files on your computer.
This is typically done to maintain your preferences or to improve speed and performance by storing certain files locally.
These technologies can also store a unique identifier for your computer, which can then track behavior.
Qualifications & exceptions
The statement says "can" store a unique identifier that "can" track behavior; it does not say when.
Not stated here
No specific control for these technologies is described in this passage.
Data Access & Collection · Company practice
Microsoft logs the time, product, identifiers, IP address and device details when you sign in
When you sign in to your Microsoft account, Microsoft logs details including the date and time, the product accessed, your sign-in name, account and device identifiers, your IP address, and operating system and browser information.
Supporting quotations
When you sign in to your Microsoft account, we log details like the date and time, product accessed, sign-in name, account and device identifiers, IP address, and operating system and browser information.
Data Access & Collection · Company practice
Diagnostic data has required and optional levels; only the optional level can be turned off
Many Microsoft products collect diagnostic data to keep services secure and up to date, help ensure they work as expected, detect and fix problems and improve products; it can include information about crashes, performance and your product usage. There are two levels. Required diagnostic data is the minimum needed to keep products secure, up to date and performing as expected, and includes information about your device, the Microsoft software you use, settings, capabilities and performance. Products that collect diagnostic data always collect the required level, but you can control whether to send optional diagnostic data. Optional diagnostic data is additional data about your use of devices, applications, accessories and other products, and may include data about the websites you browse, device activity and enhanced error reporting. A Privacy Report is linked for more on how diagnostic data is used and is not supplied here.
Supporting quotations
Many Microsoft products collect diagnostic data to keep our services secure and up-to-date; help ensure they work as expected; detect, diagnose, and fix problems; and improve our products.
Products that collect diagnostic data will always collect required diagnostic data, but you can control whether to send us optional diagnostic data.
The minimum data necessary to help keep our products, apps and services secure, up to date, and performing as expected.
This may also include data about the websites you browse, device activity (also sometimes referred to as usage), and enhanced error reporting.
Qualifications & exceptions
Required diagnostic data is always collected by products that collect diagnostic data.
Only optional diagnostic data can be controlled.
Optional diagnostic data "may" include browsing data.
Not stated here
The linked Privacy Report is not part of the supplied text.
Data Access & Collection · Restriction or exception
Preview and free-of-charge releases can collect more data and offer fewer controls
Microsoft offers preview, insider, beta or other free-of-charge products and features so you can evaluate them while providing data about your use, including feedback and device and usage data. As a result, previews can automatically collect additional data, provide fewer controls and use different privacy and security measures than those typically present in its products.
Supporting quotations
previews can automatically collect additional data, provide fewer controls, and otherwise employ different privacy and security measures than those typically present in our products
Qualifications & exceptions
Applies to previews, insider, beta and other free-of-charge releases.
Data Access & Collection · Company practice
Copilot Health lets you upload health records and wearable data to personalize health information
Copilot Health is a consumer Copilot offering for personalized assistance on health and wellness. It lets you upload health-related data, including personal health records and data from wearable devices, and can use that data together with your prompts and chat history to give you personalized information and recommendations.
Supporting quotations
Copilot Health allows you to upload health-related data including your personal health records and data from wearable devices.
Copilot Health can use that data, along with your prompts and chat history, to provide you with personalized information and recommendations.
Qualifications & exceptions
You choose what health data to upload.
Data Access & Collection · Company practice
Microsoft collects customer contact, support and device data and personalizes its messages to enterprise customers
When a customer such as an employer or school uses, buys or subscribes to Enterprise and Developer Products, or gets support for professional services, Microsoft collects and generates data to provide the service, run its business and communicate with the customer. Examples: when a customer deals with a sales representative, Microsoft collects the customer's name, contact data and organization information; when a customer contacts a support professional, it collects device and usage data or error reports to diagnose problems; and when it sends communications to the customer, it uses data to personalize the content.
Supporting quotations
Microsoft collects and generates data to provide the service, conduct our business operations, and communicate with the customer.
we collect the customer’s name and contact data, along with information about the customer’s organization, to support that engagement
we collect device and usage data or error reports to diagnose and resolve problems
we use data to personalize the content of the communication
Qualifications & exceptions
The three situations are examples.
Data Access & Collection · Company practice
Enterprise and developer software and appliances collect mainly device and usage data, with some optional reports
Enterprise and developer software and enterprise appliances collect data to operate effectively and provide the best experiences. The data depends on the features used and the organization's configuration and settings but is generally limited to device and usage data, and customers and, where applicable, end users may have choices about the data provided. Examples are device and usage data during installation or upgrade, device and usage data from product usage to improve security and functionality, and optional error reports sent to Microsoft. Microsoft uses this data to provide and improve products, deliver customer support, activate products, communicate with users and operate its business in compliance with applicable data protection laws.
Supporting quotations
The types of data collected depend on the features you use and your organization’s configuration and settings but is generally limited to device and usage data.
Customers and, where applicable, end users may have choices about the data provided.
Device and usage data collected during installation or upgrade to address technical issues.
Device and usage data from product usage to improve security and functionality.
Optional error reports sent to Microsoft to help diagnose problems and deliver support.
Microsoft uses this data to provide and improve our products, deliver customer support, activate products, communicate with users, and operate our business in compliance with applicable data protection laws.
Qualifications & exceptions
"Generally limited to" device and usage data, not strictly limited.
Error reports are described as optional.
Data Access & Collection · Company practice
HoloLens collects diagnostic data and sensor data, including camera, microphone and infrared inputs
HoloLens is a self-contained Windows computer headset. Microsoft collects diagnostic data to solve problems and keep Windows on HoloLens up to date, secure and working, and to improve HoloLens and related products depending on the diagnostic data settings you chose. HoloLens also processes and collects data related to the experience and device, which include cameras, microphones and infrared sensors that enable motion and voice navigation. The headset's microphones enable voice commands for navigation, controlling apps or entering search terms; a link goes to the voice data collection section.
Supporting quotations
Microsoft collects diagnostic data to solve problems and to keep Windows running on HoloLens up to date, secure, and operating properly.
depending on the diagnostic data settings you’ve chosen for your device
HoloLens also processes and collects data related to the HoloLens experience and device, which include cameras, microphones, and infrared sensors that enable motions and voice to navigate.
The headset's microphones enable voice commands for navigation, controlling apps, or to enter search terms.
Qualifications & exceptions
Diagnostic data use for improvement depends on the diagnostic data settings you chose.
Data Access & Collection · User right or choice
HoloLens iris sign-in, hand gestures and environment tracking stay on the device
If you choose, HoloLens cameras can sign you in using your iris: it takes an image of your iris and measures distances between key points to create and store a numeric value that represents only you. Microsoft says this data stays on the HoloLens, is not shared with anyone, and you can delete it at any time. Hand gestures for system interactions are processed on the device and not stored. Environmental tracking points that let HoloLens understand surfaces have no associated images, are stored locally on the device, and you can delete them at any time.
Supporting quotations
If you choose, cameras can be used to sign you in automatically using your iris.
This data stays on the HoloLens and is not shared with anyone, and you can choose to delete this data from your HoloLens at any time.
This data is processed on your HoloLens device and is not stored.
There are no images associated with this environmental data and it is stored locally on the HoloLens device. You can choose to delete this data from your HoloLens at any time.
Qualifications & exceptions
Iris sign-in is optional ("if you choose").
These statements are about HoloLens on-device handling, not about all Microsoft products.
Data Access & Collection · Company practice
Productivity and communications products collect usage data and communication details, such as time and users in Teams
Productivity and communications products, such as Microsoft 365, Teams and OneDrive, are used to create, store and share documents and communicate with others. Microsoft says these services use your data depending on their features and how you use them. For example, when you use Teams it collects usage data and information about your communications, including the time and date and the users that are part of the communication. The statement points to the sections below for details by service.
Supporting quotations
These services will use your data depending on their features and how you use them
we will collect usage data as well as information about your communications when you use Microsoft Teams, including the time and date and users that are part of the communication
These services will use your data depending on their features and how you use them
Qualifications & exceptions
Data use depends on the service features and how you use them.
Data Access & Collection · Company practice
The Office Roaming Service syncs your settings, including privacy settings, to Microsoft servers
The Office Roaming Service keeps your settings, including privacy settings, up to date across devices running Microsoft 365 or Office apps. When you sign in with a Microsoft account or an account from your organization, it syncs some customized settings to Microsoft servers, and when you sign in on another device it downloads and applies them. When you sign out, the service removes your settings from the device, and any changes you make to customized settings are sent to Microsoft servers.
Supporting quotations
When you sign in to your apps with either your Microsoft account or an account issued by your organization, the service syncs some of your customized settings to Microsoft servers.
When you sign out of your apps, the service removes your settings from your device.
Any changes you make to your customized settings are sent to Microsoft servers.
Qualifications & exceptions
Syncs "some" of your customized settings.
Data Access & Collection · Restriction or exception
Microsoft 365 diagnostic data excludes your name, email address and file content
Diagnostic data in Microsoft 365 and Office is used to keep the apps secure and up to date, detect, diagnose and remediate problems, and make product improvements. Microsoft says this data does not include a user's name or email address, the content of the user's files, or information about apps unrelated to Microsoft 365 or Office. More detail is on linked pages and in the Diagnostic Data section.
Supporting quotations
Diagnostic data is used to (i) keep your Microsoft 365 or Office apps secure and up to date; (ii) detect, diagnose, and remediate problems; and (iii) make product improvements.
This data does not include a user’s name or email address, the content of the user’s files, or information about apps unrelated to Microsoft 365 or Office.
Qualifications & exceptions
The exclusions are stated for this diagnostic data in Microsoft 365 and Office.
Data Access & Collection · Restriction or exception
Essential services in Microsoft 365 cannot be disabled and always send required service data
Some services are essential to how Microsoft 365 and Office function and cannot be disabled; the licensing service that confirms you are properly licensed is one example. Required service data is collected and sent to Microsoft regardless of any other settings you have configured.
Supporting quotations
There are a set of services that are essential to how Microsoft 365 and Office function and cannot be disabled.
Required service data is collected and sent to Microsoft, regardless of any other settings that you have configured.
Qualifications & exceptions
Applies regardless of other settings you have configured.
Data Access & Collection · Company practice
Microsoft 365 apps use your microphone, camera, screen and contacts only when you start the related feature
Some Microsoft 365 apps use device capabilities through specific features: PowerPoint recording can use your microphone and camera, Record audio and Speaker Coach use the microphone, screenshot and screen clipping capture screen contents, Sticky Notes screenshots capture other apps' active windows, Dictate and Transcribe in Word, OneNote and PowerPoint use the microphone for speech-to-text, OneNote can insert photos or record video using the camera, and sharing in Microsoft 365 apps, To Do and Whiteboard accesses your contacts. Microsoft says applications will not access device capabilities until you begin using the feature, and you can manage microphone and camera access in Windows Privacy Settings.
Supporting quotations
the presentation recording feature can access your device microphone and camera to record presentations with audio and video
you can capture content from the active window of other apps on your device and insert it into your note
All Microsoft 365 apps along with To Do and Whiteboard have sharing functionality that accesses your contacts to allow you to share your documents with others in your contacts list.
Applications will not access your device capabilities until you begin using the feature.
You can manage your microphone and camera access settings in the Windows Privacy Settings menu.
Qualifications & exceptions
Access begins only when you start using the feature.
Data Access & Collection · Company practice
Family activity reporting collects a child's device, search, web, app and game activity and reports it to parents
When family activity reporting is enabled for a child, Microsoft collects details about how the child uses their devices, such as search, web, app and game activity, and gives parents reports of the child's online activities. Microsoft says activity reports are routinely deleted from its servers, without giving a time period.
Supporting quotations
When you have enabled family activity reporting for a child, Microsoft will collect details about how the child uses their devices, such as search, web, app, and game activity, and provide parents with reports of that child's online activities.
Activity reports are routinely deleted from Microsoft servers.
Qualifications & exceptions
Applies only when family activity reporting is enabled for the child.
Not stated here
The text does not say how long activity reports are kept before routine deletion.
Data Access & Collection · Company practice
Family Safety location features upload your location, share it with the family group and record driving habits
Certain Family Safety features, such as Location Sharing, Drive Safety, Share Drives, Places and Location Alerts, use your location information when enabled. With Location Sharing, your device uploads location data to the cloud and shares it with others in your family group, and Microsoft retains only your last known location for that feature. Drive Safety uses location to record driving habits such as speed limits, phone use while driving and sudden acceleration or braking; those reports go to the cloud and you can choose to share them with your family group. You can turn these location features off at any time in Family Safety settings and manage location data on the Microsoft Privacy Dashboard.
Supporting quotations
Certain Family Safety features, such as Location Sharing, Drive Safety, Share Drives, Places, and Location Alerts, will use your location information when enabled.
your device will upload location data to the cloud and share it with others in your family group
Microsoft retains only your last known location as part of the Location Sharing feature.
your location will be used to record your driving habits, such as whether you are driving within the speed limits, if you’re using your phone while driving, and if you accelerate or brake suddenly
You can turn off these location features at any time in the Family Safety settings.
Qualifications & exceptions
Applies when the features are enabled.
For Location Sharing, only the last known location is retained.
Data Access & Collection · Company practice
Launcher's Copilot features may need camera, microphone and photos, and Glance syncs your daily data across devices
When signed in with a personal Microsoft account, Launcher lets you use Copilot features such as chat, web search, voice search and image search, and certain Copilot features require access to your device camera, microphone, photos and videos. Glance organizes daily activities such as your Outlook calendar, To Do list, Sticky Notes and recent documents in your Microsoft 365 apps; after signing in with a personal or work account, your data is synced across devices signed in to the same account to give you personalized experiences, and it can show recent photos and app usage if you give Glance permission to access that data.
Supporting quotations
Certain Copilot features require access to your device capabilities, such as your device camera, microphone, photos, and videos.
After signing-in with your personal Microsoft account or your work account, your data will be synced across devices signed into the same account to give you personalized experiences.
if you have given Glance permission to access that data
Qualifications & exceptions
Camera, microphone, photos and videos access is needed only for certain Copilot features.
Recent photos and app usage are shown only if you give Glance permission.
Data Access & Collection · Company practice
Launcher backups can be stored on your device or in OneDrive, and work profiles keep work and personal data apart
Launcher's backup and restore feature lets you transfer between phones or try different home screen setups, and backups can be stored locally or saved to the OneDrive account tied to your Microsoft account. Launcher supports Android work profile features, which keep personal and work data separate so you can access work resources without mixing them with personal apps and data.
Supporting quotations
Backups can be stored locally on your device or saved to your OneDrive account associated with your Microsoft account for easy access.
Microsoft Launcher supports Android work profile features, enabling you to maintain a clear boundary between personal and work data on your device.
Data Access & Collection · Company practice
Consumer Teams collects usage and communication details and can share your location with consent
This section applies to the consumer offering of Teams; if you use Teams with a school or work account, the Enterprise and developer products section applies. Teams is a collaboration and communication hub, and Microsoft collects usage data and information about your communications, including the time and date and the users that are part of the communication. With your consent you can share your location with friends and family.
Supporting quotations
This section applies to the consumer offering of Teams; if you are using Teams with a school or work account, see the
Microsoft collects usage data as well as information about your communications, including the time and date of the communication and users that are part of the communication.
With your consent, you can share your location with friends and family.
Qualifications & exceptions
Consumer Teams only; work or school accounts follow the enterprise section.
Location sharing needs your consent.
Data Access & Collection · Company practice
With your permission, Teams syncs device and Outlook contacts and may send invitations for you
With your permission, Teams periodically syncs your device and Outlook contacts and checks for other Teams users who match them. If you stop syncing, or if you are inactive on your device, contacts that have not been matched are deleted from Teams. If you want to invite contacts, you can invite users to a 1:1 directly, or Microsoft can send an invitation on your behalf via SMS or email for group conversations.
Supporting quotations
With your permission, Teams will sync your device and Outlook contacts periodically and check for other Teams users that match contacts in your device or Outlook address books.
any contacts that have not been matched during the synchronization process will be deleted from Teams
Microsoft can send an invitation on your behalf via SMS or email for invitations to group conversations
Qualifications & exceptions
Requires your permission.
Unmatched contacts are deleted from Teams if you stop syncing or are inactive.
Data Access & Collection · Company practice
Teams processes data of non-users found in other users' synced contacts and stores it while the sync continues
If your information is in the device or Outlook address book of a Teams user who syncs contacts with Teams, Microsoft may process your data to find out whether you are a current Teams user and to let that user invite you, including by SMS and email. As long as the Teams user stays active on Teams and keeps contact syncing enabled, your information is stored on Microsoft servers and periodically processed to check whether you have since joined Teams. If you join Teams, you appear as a suggested new contact for any Teams users who have your information in their address books.
Supporting quotations
Microsoft may process your data in order to determine whether you are a current Teams user and to allow Teams users to invite you to the service, including via SMS and email.
As long as the Teams user continues to be active on Teams on their device and continues to enable contact syncing with the applicable device or service, your information will be stored on our servers, and we will periodically process your information as a part of the Teams user’s contact syncing experience to check whether you have subsequently joined Teams.
If you do choose to join Teams, you will appear as a suggested new Teams contact for any Teams users with your information in their device or Outlook address books.
Qualifications & exceptions
Applies to people who are not Teams users but appear in a Teams user's synced contacts.
Storage continues as long as the Teams user remains active and keeps syncing.
Data Access & Collection · Company practice
OneDrive collects usage data and the content you store, and indexes document contents for search
When you use OneDrive, Microsoft collects data about your usage of the service and the content you store, to provide, improve and protect the services. For example, it indexes the contents of your OneDrive documents so you can search for them later. It also collects device information to deliver personalized experiences such as syncing content across devices. Files in OneDrive for Business are stored separately from personal OneDrive files, and OneDrive for Business collects and transmits personal data for authentication, such as your email address and password, to Microsoft and/or to the provider of your Microsoft 365 service.
Supporting quotations
we collect data about your usage of the service, as well as the content you store, to provide, improve, and protect the services
we index the contents of your OneDrive documents so that you can search for them later
We also collect device information so we can deliver personalized experiences, like enabling you to sync content across devices.
Files managed with OneDrive for Business are stored separately from files stored with your personal OneDrive.
OneDrive for Business collects and transmits personal data for authentication, such as your email address and password, which will be transmitted to Microsoft and/or to the provider of your Microsoft 365 service.
Qualifications & exceptions
OneDrive for Business authentication data goes to Microsoft and/or the Microsoft 365 service provider.
Data Access & Collection · Company practice
Adding an Outlook account syncs your mail, calendar, files and contacts; mobile Outlook also syncs to Microsoft servers
Outlook client applications let you manage email, calendar items, files and contacts from services like Exchange Online and Outlook.com, even across accounts from third-party providers. To add an account you must give Outlook permission to access data from the email or file storage service. When you add an account, your emails, calendar, files, contacts, settings and other data automatically sync to your device. On the mobile app this data also syncs to Microsoft servers to enable features like improved search and personalized mail filtering; on desktop you can choose whether to sync data to Microsoft servers. You can remove accounts or change sync settings at any time. If you add a work or school account, your organization can set rules and controls, such as requiring multi-factor authentication or remotely erasing data on your device, that affect how you use Outlook.
Supporting quotations
To add an account to your Outlook applications, you must provide permission for Outlook to access data from the email or file storage services.
your emails, calendar, files, contacts, settings, and other data automatically sync to your device
On the mobile Outlook app, this data also syncs to Microsoft servers to enable enhanced features like improved search and personalized mail filtering.
On desktop, you can choose whether to sync your data to Microsoft servers. You can remove accounts or change sync settings at any time.
your organization can set rules and controls — like requiring multi-factor authentication or remotely erasing data on your device — that can affect how you use Outlook
Qualifications & exceptions
Mobile Outlook syncs to Microsoft servers; on desktop this is your choice.
Work or school accounts are subject to the organization's rules, including remote erase.
Data Access & Collection · Company practice
Outlook can use your microphone for Dictate and your location for weather and nearby search
In Outlook clients that support it, the Dictate feature uses your device microphone, or another connected microphone, to dictate and send an email. Outlook may also use your device location to provide weather for your current location and to let you search for nearby locations. The statement points to the Microsoft 365 section for more on the data Outlook applications collect.
Supporting quotations
you can use the Dictate feature to dictate the contents of and send an email. You can Dictate with your device’s microphone or any other microphone you connect to your device.
Outlook may also use your device location information to provide you with weather information for your current location as well as provide the ability to search for nearby locations.
Qualifications & exceptions
Location use is stated as "may".
Data Access & Collection · Company practice
Skype Dial Pad calls collect usage data including time, date, and numbers or user names on the call
The Skype Dial Pad lets you make and receive calls to landlines or mobile numbers. This section applies to consumer Skype; for Skype for Business, the Enterprise and developer products section applies. As part of providing the features, Microsoft collects usage data about your calls, including the time and date and the numbers or user names that are part of the calls. A Skype user can also log in to Teams using Skype credentials and chat and call other Teams users.
Supporting quotations
This section applies to the consumer version of Skype; if you are using Skype for Business, see the
Microsoft collects usage data about your calls, including the time and date and the numbers or user names that are part of the calls.
If you log into Teams via your Skype credentials, you can use Teams to chat with and call other Teams users.
Qualifications & exceptions
Consumer Skype only; Skype for Business follows the enterprise section.
Data Access & Collection · Company practice
Microsoft collects diagnostic data from Surface devices, accessories and apps
Microsoft offers Surface devices and accessories for everyday computing. It collects diagnostic data as you use Surface devices, accessories and applications, and refers to the Diagnostic data section and linked pages for detail, including a list of required Surface diagnostic data. Those linked pages are not supplied here.
Supporting quotations
Microsoft collects diagnostic data as you use your Surface devices, Surface accessories, and Surface applications.
Not stated here
The linked Surface diagnostic data pages and the list of required diagnostic data are not part of the supplied text.
Data Access & Collection · Company practice
Surface Duo runs on Google Android, may rely on Google information, and sends diagnostic data without name or email
Microsoft provides a core Surface Duo experience that runs on the Google Android operating system, including apps such as Microsoft Launcher. You can sign in with a Google ID to enable Google services and also sign in with a Microsoft account to enable Microsoft services. Microsoft apps and services may rely on information provided by Google. Surface Duo collects diagnostic data to solve problems, keep the core experience up to date and secure, and improve Surface Duo and related products and services; Microsoft states the data does not include your user name, email address or the content of your files.
Supporting quotations
Microsoft provides a core Surface Duo experience that runs on the Google Android operating system.
Microsoft apps and services may rely on information provided by Google.
Surface Duo collects diagnostic data to solve problems and to keep the core Surface Duo experience up to date, secure, and operating properly.
The data does not include your user name, email address, or the content of your files.
Qualifications & exceptions
Microsoft apps and services "may" rely on information provided by Google.
Data Access & Collection · Restriction or exception
On Surface Duo, Microsoft apps need location enabled for both Google and Microsoft
Surface Duo uses Google location services to determine your device's precise location to give you experiences such as local weather. To let Microsoft apps use location-based features, you must enable location services for both Google and Microsoft, and some apps may require enabling these separately in Surface Duo settings. The Google Privacy Policy covers Google's location service and related practices and is not supplied here.
Supporting quotations
Surface Duo uses Google location services for determining your device’s precise geographic location to provide you with enhanced experiences such as to show you your local weather.
To allow Microsoft apps to access location-based features, you must enable location services for both Google and Microsoft .
Qualifications & exceptions
Both Google and Microsoft location settings must be enabled for Microsoft location-based features.
Not stated here
Google's privacy policy is not part of the supplied text.
Data Access & Collection · User right or choice
If you opt in, SwiftKey sends de-identified typing snippets to Microsoft and does not link them to your account
When you opt in to share, SwiftKey collects device and usage data and uses de-identified device, usage and model data to analyze performance and improve products. You can also choose to share SwiftKey language and typing data; if you opt in, SwiftKey may send short, de-identified snippets of what and how you type, with related correction data, to Microsoft servers. These snippets are used in automated processes to validate prediction services and enhance features, and Microsoft says they are never linked to your SwiftKey account. You can manage choices at any time in SwiftKey Settings.
Supporting quotations
When you opt in to share with us, SwiftKey collects device and usage data and uses de-identified device data, usage data, and model data to analyze service performance and improve products.
If you opt in, SwiftKey may send short, de-identified snippets of what and how you type, along with related correction data to our servers for processing.
To protect your privacy, these snippets are never linked to your SwiftKey account.
You can manage your choices at any time in SwiftKey Settings.
Qualifications & exceptions
Applies only if you opt in.
Snippets are described as short and de-identified; the de-identification method is not described.
Data Access & Collection · Company practice
SwiftKey AR effects process your face and hand data only on your device and delete it immediately
If you use the SwiftKey camera and choose to apply Augmented Reality effects to selfies through third-party lens services, the lens feature processes your video and images to extract information about the location of your face and hands, solely to transform your appearance. Microsoft states this session-based data is processed only on your device, is not used to personally identify you, is deleted immediately after use, and is never sent to SwiftKey or any third party.
Supporting quotations
you can choose to apply Augmented Reality (AR) effects to your selfies through third-party lens services
This session-based data is processed only on your device, is not used to personally identify you, is deleted immediately after use, and is never sent to SwiftKey or any third party.
Qualifications & exceptions
Applies only if you choose to apply AR effects.
Data Access & Collection · Company practice
Bing uses your search or command, IP address, location, cookie IDs, time and browser setup to complete the task
Bing services include search and mapping and collect and process data in many forms, including inked or typed text, voice data and images; they also power experiences inside other Microsoft services such as Microsoft 365 and some Windows features. When you search or enter a command in a Bing-powered experience, Microsoft uses that data (text, voice or image) along with your IP address, location, the unique identifiers in cookies or similar technologies, the date and time of your search and your browser configuration to complete the task. If you use Bing voice-enabled services, your voice input and speech performance data are sent to Microsoft.
Supporting quotations
Bing services collect and process data in many forms, including text that has been inked or typed, voice data, and images.
we will use that data (which could take the form of text, voice data, or an image), along with your IP address, location, the unique identifiers contained in our cookies or similar technologies, the time and date of your search, and your browser configuration to complete the task you’ve requested
If you use Bing voice-enabled services, your voice input and the performance data associated with the speech functionality will be sent to Microsoft.
Data Access & Collection · User right or choice
Search suggestions collect what you type and click, and cannot be turned off in the Windows search box
To give search suggestions as you type, Microsoft collects the characters you type and what you click. You can turn the feature on or off in Bing Settings, and in Microsoft Edge in Edge Settings. In the search box in Windows 10 and Windows 11, search suggestions cannot be turned off.
Supporting quotations
Microsoft collects the characters that you type and what you click on.
To turn this feature on or off in Bing, go to
Search suggestions cannot be turned off in the search box in Windows 10 and Windows 11.
Qualifications & exceptions
Cannot be turned off in the Windows 10 and 11 search box.
Data Access & Collection · User right or choice
The Bing Experience Improvement Program collects visited website addresses, deletes them after 18 months and is optional
If you use Bing Desktop or Bing Toolbar and choose to take part in the Bing Experience Improvement Program, Microsoft collects additional data about how you use those apps, including the addresses of the websites you visit, to improve search ranking and relevance. It states that it does not use this data to identify or contact you or to personalize advertising. You can turn the program off at any time in the app settings, and Microsoft deletes the information collected through it after 18 months.
Supporting quotations
If you are using Bing Desktop or Bing Toolbar and choose to participate in the Bing Experience Improvement Program, we also collect additional data about how you use these specific Bing apps, including the addresses of the websites you visit, to help improve search ranking and relevance.
We do not use the data collected through the Bing Experience Improvement Program to identify or contact you or to personalize advertising.
We delete the information collected through the Bing Experience Improvement Program after 18 months.
Qualifications & exceptions
Applies only if you choose to participate in the program.
Data Access & Collection · Company practice
Edge stores browsing data and passwords on your device, and sites you visit receive standard browser data
Microsoft Edge is the default web browser for Windows and is available on Linux, macOS, iOS and Android. Microsoft collects data necessary to provide features you request. Data about how you use the browser, such as browsing history, web form data, temporary internet files and cookies, is stored on your device, as are passwords saved in Password Manager, and you can delete this data in Edge settings. Whenever you use a browser, standard data about your device, such as IP address, browser type and language, access times and referring site addresses, is sent to the sites you visit, which may log it under their own practices.
Supporting quotations
Microsoft collects data that is necessary to provide features you request in Microsoft Edge.
Data about how you use your browser, such as your browsing history, web form data, temporary internet files, and cookies, are stored on your device.
Edge can also store your passwords on your device in Password Manager. You can delete this data from your device in Edge settings.
standard data about your device—like your IP address, browser type and language, access times, and referring website addresses—is sent to the websites you visit and online services you use
Qualifications & exceptions
Local storage of browsing data is on your device; Microsoft collects data "necessary to provide features you request".
Data Access & Collection · Company practice
Edge sends required diagnostic data and optional data such as browsing history, tied to a browser installation ID
Microsoft Edge collects diagnostic data to keep the service up to date, secure and working. You can choose to send optional diagnostic data, including usage information, browsing history, information about websites you visit and search terms, to help enhance Edge and other Microsoft products and services. The diagnostic data collected by Edge is stored with one or more unique identifiers that help Microsoft recognize an individual browser installation on a device and understand service issues and use patterns.
Supporting quotations
Microsoft Edge collects diagnostic data to keep the service up to date, secure, and operating properly.
You can also choose to send optional diagnostic data—including usage information, browsing history, information about websites you visit, and search terms—to help enhance Microsoft Edge and other Microsoft products and services.
The diagnostic data collected by Microsoft Edge is stored with one or more unique identifiers that help us recognize an individual browser installation on a device and understand the browser’s service issues and use patterns.
Qualifications & exceptions
Optional diagnostic data (including browsing history) is your choice.
Identifiers recognize an individual browser installation.
Data Access & Collection · User right or choice
When allowed, Edge uses your search activity on any website to improve services, de-identified and kept for one year
When you allow it, Microsoft Edge collects and uses data from your search activity across the web, including on websites Microsoft does not own or operate, to improve Microsoft services. This may include search queries, the results and your interactions with them (such as links you click), and demographic information that is part of the search results. Edge de-identifies this data and retains it for one year, and Microsoft states it does not use it to personalize or provide ads to you. You can turn off this collection in Edge settings.
Supporting quotations
When you allow it, Microsoft Edge collects and uses data from your search activity across the web, including websites Microsoft does not own or operate, to improve Microsoft services.
Microsoft Edge de-identifies this data and retains it for one year.
Microsoft does not use this collected data to personalize or provide ads to you.
You can turn off this data collection in your Edge settings.
Qualifications & exceptions
Applies only when you allow it.
Data Access & Collection · User right or choice
Copilot in Edge can access your browsing activity and screenshots if you allow, and captures page snapshots for tasks
Copilot in Edge collects and processes data to provide requested services, including typed text, voice data and uploaded files. You can choose to let Copilot in Edge access your browsing activity, including screenshots of webpages you visit, open tabs and browsing history, to give better answers and enable advanced features, and you can manage these choices in Edge settings. If you choose features that perform tasks on your behalf, Copilot captures visual snapshots of the pages it visits to interact with them and complete the action. Microsoft says Edge's use of data connected with Copilot is consistent with the Copilot data use described in the AI section.
Supporting quotations
Copilot in Edge collects and processes data in order to provide the services requested, including text that has been typed, voice data, and uploaded files.
you can choose to allow Microsoft Copilot in Edge to access your browsing activity, including screenshots of webpages you visit, open tabs, and browsing history to provide better answers and enable advanced Copilot features
You can manage Copilot in Edge choices in Edge settings.
If you choose to use features that perform tasks on your behalf, Copilot will capture visual snapshots of the pages it visits to interact with and complete the action.
Qualifications & exceptions
Access to browsing activity requires your choice.
Snapshots apply when you use features that perform tasks on your behalf.
Data Access & Collection · Company practice
Windows collects data about you, your device and your use, and a managing organization can access and control it
Windows is a personalized computing environment with cloud-based components. To provide and secure it, Microsoft collects data about you, your device and the way you use Windows, and offers optional features such as personalized tips, ads and recommendations; Windows gives you choices about the data collected and how it is used. If your device is managed by an organization such as an employer or school, the organization may use centralized management tools to access and process your data, including interaction data, diagnostic data and the contents of your communications and files, and to control device settings including privacy settings, policies, software updates and data collection. This statement covers Windows 10 and Windows 11; earlier versions have their own statements.
Supporting quotations
we collect data about you, your device, and the way you use Windows
We also provide you with optional features like personalized tips, ads, and recommendations.
If your Windows device is managed by your organization, your organization may use centralized management tools provided by Microsoft or others to access and process your data (including your interaction data, diagnostic data, and the contents of your communications and files), and to control device settings (including privacy settings), device policies, software updates, data collection by us or the organization, or other aspects of your device.
This statement discusses Windows 10 and Windows 11; earlier versions of Windows are subject to their own privacy statements.
Earlier versions of Windows are subject to their own privacy statements.
Qualifications & exceptions
Applies to Windows 10 and Windows 11 only.
Organization access applies when your device is managed by an organization.
Data Access & Collection · Company practice
Activating Windows sends your product key and device data to Microsoft, and on phones device location at first power-up
When you activate Windows, a product key is associated with your device, and the key plus data about the software and your device are sent to Microsoft to validate your license. This data may be sent again if you need to re-activate or validate. On phones running Windows, device and network identifiers and the device location at first power-up are also sent to Microsoft for warranty registration, stock replenishment and fraud prevention.
Supporting quotations
The product key and data about the software and your device are sent to Microsoft to help validate your license to the software.
On phones running Windows, device and network identifiers, as well as device location at the time of the first power-up of the device, are also sent to Microsoft for the purpose of warranty registration, stock replenishment, and fraud prevention.
Qualifications & exceptions
Phone location at first power-up applies to phones running Windows.
Data Access & Collection · Company practice
Windows diagnostic data is stored with identifiers that recognize individual users on a device
Microsoft collects Windows diagnostic data to solve problems, keep Windows up to date, secure and working, and improve Windows and related products. The data is collected periodically from your device and stored with unique identifiers that help Microsoft recognize individual users on a device and identify issues and usage patterns. Product materials sometimes call required diagnostic data "Basic" and optional diagnostic data "Full"; current lists of the events and fields are on linked pages that are not supplied here.
Supporting quotations
Microsoft collects diagnostic data to solve problems and to keep its products like Windows up to date, secure, and operating properly, and to improve Windows and related Microsoft products and services.
This data is periodically collected from your device and stored with unique identifiers to help Microsoft recognize individual users on a device and identify issues and usage patterns.
Certain product documentation and other materials refer to required diagnostic data as “Basic diagnostic data” and to optional diagnostic data as “Full diagnostic data.”
Not stated here
The linked lists of required and optional Windows diagnostic events are not part of the supplied text.
Data Access & Collection · Company practice
Required Windows diagnostic data covers device, network, OS, peripherals, installed apps and update status
Required diagnostic data includes information about your device, its settings and capabilities, and whether it is performing properly. Listed items: device data such as processor type, manufacturer, battery, cameras, firmware and memory; network capabilities and connection data such as the IP address, mobile network and whether the connection is free or paid; operating system and configuration data such as version, region and language settings, diagnostics settings and Windows Insider membership; connected peripherals; applications installed, with name, version and publisher; whether the device is ready for and receives updates and whether they succeed; the reliability of the diagnostics system itself; and basic error reporting on the health of the operating system and applications.
Supporting quotations
Required diagnostic data includes information about your device, its settings and capabilities, and whether it is performing properly.
Data about the device such as the processor type, OEM manufacturer, type of battery and capacity, number and type of cameras, firmware, and memory attributes.
Network capabilities and connection data such as the device’s IP address, mobile network, and whether the device is connected to a free or paid network.
Data about the operating system and its configuration such as the OS version and build number, region and language settings, diagnostics data settings, and whether the device is part of the Windows Insider program.
Data about connected peripherals such as model, manufacturer, drivers, and compatibility data.
Data about the applications installed on the device such as application name, version, and publisher.
Whether a device is ready for and can receive an update based on factors like low battery, limited disk space, or connectivity through a paid network.
Whether updates complete successfully or fail.
Data about the reliability of the diagnostics collection system itself.
Basic error reporting, which is health data about the operating system and applications running on your device.
Data Access & Collection · User right or choice
Optional Windows diagnostic data adds app activity, Edge browsing history and search terms, and crash memory
If you choose to send optional diagnostic data, required diagnostic data is always included, and Microsoft also collects additional device, connectivity and configuration data; status and logging information about the health of the operating system and other components; app activity, such as which programs are launched, how long they run and how quickly they respond; browser activity in Microsoft Edge, including browsing history and search terms; and enhanced error reporting that includes the memory state of the device when a crash occurs, which may unintentionally contain user content such as parts of a file you were using.
Supporting quotations
When you choose to send optional diagnostic data, required diagnostic data will always be included
Additional data about the device, connectivity, and configuration, beyond that collected as part of required diagnostic data.
Status and logging information about the health of operating system and other system components beyond that collected about the update and diagnostics systems under required diagnostic data.
App activity, such as which programs are launched on a device, how long they run, and how quickly they respond to input.
Browser activity, including browsing history and search terms, in Microsoft Edge.
Enhanced error reporting, including the memory state of the device when a system or app crash occurs (which may unintentionally contain user content, such as parts of a file you were using when the problem occurred).
Qualifications & exceptions
Optional diagnostic data is sent only if you choose; required diagnostic data is always included.
Crash memory "may unintentionally contain user content".
Data Access & Collection · Company practice
Optional Windows diagnostic data is collected from only a sample of devices, and a viewer shows what your device sends
Even if you choose to send optional diagnostic data, some of the data may not be collected from your device: Microsoft minimizes collection by gathering some data from only a subset (sample) of devices. The Diagnostic Data Viewer tool shows whether your device is part of a sample and what data is collected from it. Download instructions are in the Windows Settings app under Diagnostics & feedback.
Supporting quotations
Microsoft minimizes the amount of data it collects by collecting some of the data from only a subset of devices (sample).
The Diagnostic Data Viewer tool shows if your device is part of a sample and what specific data is collected from your device.
Qualifications & exceptions
Some optional data comes from a sample of devices only.
Data Access & Collection · User right or choice
If you enable it, Windows collects samples of what you type or write, processed to remove identifying details
You can choose to help improve inking and typing recognition by sending inking and typing diagnostic data. If enabled, Microsoft collects samples of what you type or write to improve features like handwriting recognition, autocompletion, next word prediction and spelling correction across languages. The samples are divided into small pieces and processed to remove information that could identify you or rebuild the original content, such as unique identifiers, sequencing details, email addresses and numeric values. Performance data, including text changes you make manually and words you add to the dictionary, is also included.
Supporting quotations
You can choose to help Microsoft improve inking and typing recognition by sending inking and typing diagnostic data.
If enabled, Microsoft collects samples of what you type or write to enhance features like handwriting recognition, autocompletion, next word prediction, and spelling correction across languages.
processed to remove information that could identify you or reconstruct the original content, such as unique identifiers, sequencing details, email addresses, and numeric values
Performance data, including text changes you make manually and words you add to the dictionary, is also included.
Qualifications & exceptions
Applies only if you enable it.
Processing is described as removing information that "could identify you or reconstruct the original content".
Data Access & Collection · Company practice
Feedback Hub reads installed apps, may use camera and microphone on HoloLens, and sends diagnostic data with feedback
Feedback Hub lets you give feedback on Microsoft products and installed first-party apps and, in some cases, third-party apps, and it determines the apps installed on your device through public APIs. For HoloLens users it can access the camera and microphone when you choose to share surroundings or audio and uses picture and document libraries to attach screenshots and recordings. When you submit feedback about a problem, diagnostic data is sent, either automatically or by your choice depending on your Windows diagnostic data settings. Additional personal data may be collected depending on the type of feedback, for example location data for feedback about location services.
Supporting quotations
It determines the apps installed on your device through public APIs.
For HoloLens users, Feedback Hub can access your camera and microphone when you choose to share surroundings or audio input
When you submit feedback about a problem to Microsoft, diagnostic data is sent to help improve Microsoft products and services.
Additional personal data may be collected based on the type of feedback you provide to better troubleshoot specific issues – for example, location data when providing feedback about location services.
Qualifications & exceptions
HoloLens camera and microphone access happens when you choose to share surroundings or audio.
Whether diagnostic data is sent automatically depends on your diagnostic data settings.
Data Access & Collection · Company practice
Get Help can run diagnostics and use the microphone if enabled, but does not use your location
Get Help gives Windows users technical support, including self-service help, diagnostics recommendations and a connection to a live Microsoft agent. If you choose to run a diagnostic, the data collected is handled under the Windows Diagnostics section. You can sign in with a Microsoft account to create a support case. If enabled by system settings, you can use the system microphone in Get Help to speak your question, with controls in the Microphone Privacy Settings. Microsoft states Get Help does not use your location for its services.
Supporting quotations
If you choose to run a Diagnostic, any diagnostic data collected is handled according to the Windows Diagnostics section above.
helps connect you to a live Microsoft agent if needed
If enabled by system settings, you can use the system microphone in Get Help to voice your support question instead of typing
Get Help does not use your location for its services.
Qualifications & exceptions
Voice questions need the microphone enabled by system settings.
Data Access & Collection · Company practice
Windows location service combines GPS, Wi-Fi, cell, IP and default location, and you control app access in Settings
Microsoft's location service helps find the precise location of your Windows device using a combination of GPS, nearby wireless access points and routers, cell towers, IP address or a default location. Location services let you control which apps can access your precise location. When turned off, Windows and apps do not have access to device location, and some apps may not be able to access information about Wi-Fi networks. When turned on, apps can access approximate location and can request permission to use precise location, which you manage in Windows Settings. When location is enabled, data about cell towers and Wi-Fi access points and their locations is collected, de-identified and used to improve location services.
Supporting quotations
Microsoft’s location service helps determine the precise geographic location of your Windows device using a combination of GPS, nearby wireless access points and routers, cell towers, IP address, or default location.
When location services are turned off, Windows and apps will not have access to device location
With location services turned on, apps can access approximate location and can request permission to use precise location. You can manage these permissions in Windows Settings.
When location is enabled, data about cell towers and Wi-Fi access points and their locations are collected, de-identified, and used to improve location services.
Qualifications & exceptions
When location services are off, Windows and apps do not have access to device location, subject to the exceptions in later paragraphs.
Data Access & Collection · Restriction or exception
Some apps and services can still find your location when Windows location services are off
Some ways of determining location are not directly controlled by the location settings. For example, desktop apps, which are usually downloaded from the internet or installed from media, do not support per-app control over precise location access. Even when you have turned off location services, some third-party apps and services could use other technologies, such as Bluetooth, IP address or a cellular modem, or cloud-based location services, to work out your device's location with varying accuracy. A limited set of Windows features use your IP address to provide contextual information for your area, such as weather on the taskbar, when location services are off.
Supporting quotations
desktop apps are a type of app that do not support per-app control over precise location access
Even when you’ve turned off location services in Windows, some third-party apps and services could use other technologies (such as Bluetooth, IP address, cellular modem, etc.) or cloud-based location services to determine your device’s location with varying degrees of accuracy.
A limited set of features in Windows will use your IP address to provide you with contextual information for your area if location services are turned off, such as weather on the taskbar.
Qualifications & exceptions
Turning off location services does not stop every way an app or feature could find your location.
Find my device lets a device administrator locate the device even if other users denied location access
Find my device lets an administrator of a Windows device find the device's location from the Microsoft devices page. To enable it, an administrator must be signed in with a Microsoft account and have the location setting enabled. The feature works even if other users have denied location access for all their apps. When the administrator tries to locate the device, users see a notification in the notification area.
Supporting quotations
The Find my device feature allows an administrator of a Windows device to find the location of that device
This feature will work even if other users have denied access to location for all their apps.
When the administrator attempts to locate the device, users will see a notification in the notification area.
Qualifications & exceptions
Requires an administrator signed in with a Microsoft account and the location setting enabled.
Data Access & Collection · Company practice
Narrator sends the image or page URL to Microsoft for descriptions; images are not kept, and you can disable it
When you use Narrator features such as image descriptions, page title descriptions or popular links lists, the image or URL of the web page you are visiting is sent to Microsoft. This data is used only to generate the requested descriptions or summaries and to improve Microsoft services such as Bing, and images are not retained after analysis. You can disable these features in Windows Settings. If you enable "Help Make Narrator Better" and submit verbal feedback through Feedback Hub, recent device and usage data, including event trace log data, is submitted with it to improve Microsoft products.
Supporting quotations
the image or URL of the web page you’re visiting is sent to Microsoft. This data is used only to generate the requested descriptions or summaries and to improve Microsoft services, such as Bing. Images are not retained by Microsoft after analysis.
You can disable these features at any time by going to
If you enable the setting “Help Make Narrator Better” in the Windows settings app and submit verbal feedback through Feedback Hub, recent device and usage data, including event trace log (ETL) data, will be submitted along with your verbal feedback
Qualifications & exceptions
Verbal feedback with device and usage data is sent only if you enable the setting and submit feedback.
Data Access & Collection · Company practice
Phone Link collects usage and device data; Android use needs an app, permissions and a Microsoft account
As part of providing Phone Link, Microsoft collects performance, usage and device data, for example the hardware capabilities of your phone and Windows device, the number and duration of Phone Link sessions and the time spent during setup. For Android phones, Phone Link can show recent photos, text messages and live calls, let you act on phone notifications, use Android apps from your PC and mirror your phone screen. To use it you must install the Link to Windows app on the phone, grant permissions, and log in to your Microsoft account on both devices, which must be online; some features need Bluetooth pairing. You can unlink the phone at any time from either device.
Supporting quotations
Microsoft collects performance, usage, and device data that includes, for example, the hardware capabilities of your mobile phone and Windows device, the number and duration of your sessions on Phone Link, and the amount of time you spent during setup.
You can use Phone Link to see recent photos, view and send text messages, and make and receive live calls from your Android phone on your Windows device.
To use Phone Link, you must install the Link to Windows app on your Android device and grant the requested app permissions.
You must log into your Microsoft account on the Phone Link feature on your Windows device and on Link to Windows on your Android phone.
You can unlink your Android phone from your Windows device at any time
Qualifications & exceptions
Android features require the Link to Windows app, permissions and a Microsoft account sign-in on both devices.
Data Access & Collection · Company practice
On Android, texts and calls are stored temporarily on your PC, visible for 30 days, plus a limited number of photos
Phone Link accesses the content of your Android text messages and the sender's or recipient's contact information. Messages are stored temporarily on your device and only those received or sent in the last 30 days are visible on the Windows device. For calls, you must enable certain permissions on both devices, such as call log access and permission to make calls from your PC; call details are stored temporarily on the Windows device and only calls from the last 30 days are visible. For photos, you can copy, share, edit, save or delete a limited number of recent photos, which are stored temporarily on the Windows device.
Supporting quotations
Phone Link accesses the content of your text messages and the sender’s or recipient’s contact information.
only those messages received and sent within the last 30 days are visible on your Windows device
you must enable certain permissions on both the Phone Link Settings page on your Windows device and Android phone’s settings, such as call logs access and permission to make phone calls from your PC
only calls received and dialed within the last 30 days are visible under call logs on your Windows device
Phone Link allows you to copy, share, edit, save, or delete a limited number of your most recent photos from your Android phone on your Windows device. These photos are temporarily stored on your Windows device.
Qualifications & exceptions
Stored temporarily on the Windows device; visibility is limited to the last 30 days for texts and calls.
Data Access & Collection · Company practice
On Android, Microsoft collects your installed app list for mirroring, and Contacts sync stores contacts online
Notifications sync requires enabling certain permissions on both devices. For app mirroring on supported devices, Microsoft collects a list of your installed Android apps and recent activity to provide the service and show recently used apps, and says it does not retain further information. Instant Hotspot shares hotspot information with the paired PC over secure Bluetooth, and mobile data charges may apply. If you enable "Contacts sync" in Link to Windows, your Android contacts are synced to the Microsoft cloud, stored online and associated with your Microsoft account, and are accessible in other Microsoft products and services.
Supporting quotations
To activate this Phone Link feature, you must enable certain permissions, such as sync notifications, on both your Windows device and Android phone.
Microsoft collects a list of your installed Android apps and recent activity to provide the service and show you your most recently used apps but does not retain further information.
Please note mobile data charges may apply depending on your mobile data plan.
Link to Windows allows you to sync your Android contacts into the Microsoft cloud.
Your contacts information is stored online and associated with your Microsoft account.
Qualifications & exceptions
Contacts sync is optional and stores contacts online.
App mirroring collects the installed app list and recent activity.
Data Access & Collection · Company practice
On iPhone, Phone Link works over Bluetooth, and Microsoft says it never stores texts or call history on its servers
With an iPhone, Phone Link lets you make and receive calls, view and send text messages and act on notifications from your Windows device. You must have Bluetooth enabled on the iPhone and may optionally install the Link to Windows app. You can unlink the iPhone from Phone Link settings or by choosing Forget This Device in the iPhone Bluetooth settings. Microsoft states it never stores your texts or call history on its servers or changes them on your iPhone.
Supporting quotations
You can use Phone Link to make and receive calls from your iPhone, view and send text messages, and view, dismiss, or perform other actions on your iPhone notification from your Windows device.
To use Phone Link, you must have Bluetooth enabled on your iPhone. You may also optionally install the Link to Windows app on your iPhone.
You can unlink your iPhone from your Windows device at any time
We never store your texts or call history on our servers or change them on your iPhone.
Data Access & Collection · Company practice
On iPhone, Phone Link reads text content and contacts, and stores texts and call details temporarily on your PC
Phone Link lets you view SMS messages delivered to your iPhone on your Windows devices and send messages from them. It accesses the content of your text messages and the sender's or recipient's contact information. The messages are stored temporarily on your Windows device, and only messages received and sent within your Bluetooth session or iMessage are visible. For calls, you must enable Sync Contacts in your iPhone's Bluetooth settings; call details are stored temporarily on your Windows device.
Supporting quotations
Phone Link accesses the content of your text messages and the sender’s or recipient’s contact information. These text messages are temporarily stored on your Windows device
To activate this feature, you must enable the Sync Contacts feature under Bluetooth settings on your iPhone. These call details are temporarily stored on your Windows device.
Qualifications & exceptions
Stored temporarily on the Windows device.
Data Access & Collection · Company practice
On iPhone, notifications and contacts sync only after you enable the matching permissions
Phone Link lets you view, read and act on your iPhone notifications on your Windows device; to activate this you must enable certain permissions, such as sync notifications, on both devices. You can sync your iPhone contacts for messaging and calling by turning on Sync Contacts under your PC name in the iPhone Bluetooth settings after connecting the iPhone to Phone Link.
Supporting quotations
To activate this Phone Link feature, you must enable certain permissions such as sync notifications, on both your Windows device and iPhone.
Phone Link allows you to sync your contacts from your iPhone to access them for messaging and calling by going into Bluetooth settings on your iPhone and toggle on Sync Contacts under your PC name after connecting your iPhone to Phone Link.
Qualifications & exceptions
Both features need permissions or settings you enable on the iPhone.
Data Access & Collection · User right or choice
Cross-device experiences link your mobile device through your Microsoft account and collect usage and device data
Cross-device experiences let your PC access a linked mobile device through your Microsoft account. By linking a device and enabling these experiences, Windows may make certain mobile device content available across Windows to provide integrated cross-device features. They can be managed under Mobile Devices in Windows Settings, and you can turn the feature on or off at any time. Microsoft collects performance, usage and device data, including the hardware capabilities of your mobile and Windows devices.
Supporting quotations
By linking your mobile device and enabling these experiences, Windows may make certain mobile device content available across Windows to deliver features and services that support integrated cross‑device functionality.
As part of providing these features, Microsoft collects performance usage and device data, including information about the hardware capabilities of your mobile and Windows devices.
You can turn this feature on or off at any time in your Windows PC Settings.
Qualifications & exceptions
Content is made available "certain" content and only when you link a device and enable the experiences.
Data Access & Collection · Company practice
Online speech recognition sends voice recordings to Microsoft, which says it will not store them without permission
Microsoft provides both device-based and cloud-based speech recognition. Turning on the Online speech recognition setting lets apps use cloud-based recognition and, in Windows 10, enables dictation. When you use cloud-based recognition, Microsoft collects and uses your voice recordings and creates a text transcription, and states it will not store, sample or listen to your voice recordings without your permission. You can turn off online speech recognition at any time to stop apps from sending voice data to Microsoft, and still use device-based features like captions, Narrator or voice access, though cloud recognition is more accurate. On HoloLens and Windows Mixed Reality, turning on speech at setup enables both settings, and while the headset is on it is always listening and sends voice input to Microsoft's cloud.
Supporting quotations
Microsoft provides both a device-based speech recognition feature and cloud-based (online) speech recognition technologies.
Turning on the Online speech recognition setting lets apps use Microsoft cloud-based speech recognition.
With both settings enabled, while your headset is turned on the device will always be listening to your voice input and will send your voice data to Microsoft’s cloud-based speech recognition technologies.
we collect and use your voice recordings and create a text transcription of the spoken words in the voice data. Microsoft will not store, sample, or listen to your voice recordings without your permission.
You can turn off online speech recognition at any time and stop any apps that rely on the online speech recognition setting from sending your voice data to Microsoft.
Qualifications & exceptions
The promise not to store, sample or listen to recordings is conditioned on not having your permission.
Headsets with speech turned on at setup are always listening while on.
Data Access & Collection · User right or choice
On HoloLens or Mixed Reality headsets you can turn off device-based speech recognition to stop listening
If you use a HoloLens or Windows Mixed Reality headset, you can turn off device-based speech recognition at any time, which stops the device from listening for your voice input.
Supporting quotations
you can also turn off device-based speech recognition at any time. This will stop the device from listening for your voice input.
Data Access & Collection · Company practice
Voice activation lets permitted apps listen for keywords, even when locked, and may send recordings to their clouds
Windows lets supported apps respond to voice keywords. If you give an app permission to listen for keywords, Windows actively monitors the microphone for them, and each app must ask for your permission first. When a keyword is detected, the app accesses and processes your voice recording and responds, and may send the recording to its own cloud services to process commands and collect recordings for other purposes, such as improving its services. Voice activation can work when the device is locked and the screen is off; once activated, an app may continue listening, and anyone who speaks near the device can activate it with the same capabilities and information as when unlocked. You can turn voice activation off at any time, but some third-party desktop apps and services could still listen to the microphone and collect voice input even when it is off.
Supporting quotations
If you’ve given permission for an app to listen for voice keywords, Windows will actively monitor the microphone for those keywords.
The app may send your voice recording to its own cloud services to process commands and collect the recordings for other purposes, such as improving its services.
Voice activation functionality can be enabled when the device is locked and the screen is off.
The app may be activated by anyone who speaks near the device and have access to the same set of capabilities and information as when the device is unlocked.
You can turn off voice activation at any time.
some third-party desktop apps and services could still be listening to the microphone and collect your voice input
Qualifications & exceptions
Requires your permission for each app.
Turning it off in Windows does not stop every third-party desktop app from listening.
Data Access & Collection · User right or choice
Voice typing may use online recognition and optional voice clips; voice access recognizes speech on the device
In Windows 11, voice typing may use both device-based and online speech recognition. You can choose to contribute voice clips to help improve voice typing, and can still use voice typing if you do not; you can change the choice at any time. Microsoft states it will not store, sample or listen to your voice recordings without your permission. Voice access lets people control their PC and write text by voice using modern on-device speech recognition that works without an internet connection, and uses the device microphone when invoked.
Supporting quotations
Voice typing may use both device-based and online speech recognition technologies to power its speech-to-text transcription service.
You can also choose to contribute voice clips to help improve voice typing. If you choose not to contribute voice clips, you can still use voice typing.
Microsoft will not store, sample, or listen to your voice recordings without your permission.
Voice access leverages modern, on-device speech recognition to accurately recognize speech and is supported without an internet connection.
Qualifications & exceptions
Contributing voice clips is optional.
Data Access & Collection · User right or choice
Inking and typing personalization collects your typed and handwritten words for a custom word list and can be turned off
Your typed and handwritten words are collected to provide a custom word list, better character recognition and text suggestions as you type or write. You can turn inking and typing personalization off at any time, which deletes the custom word list stored on your device; if you turn it back on you will need to recreate the list.
Supporting quotations
Your typed and handwritten words are collected to provide you with a custom word list, better character recognition to help you type and write on your device and text suggestions that appear as you type or write.
You can turn off inking & typing personalization at any time. This will delete your custom word list stored on your device.
Data Access & Collection · User right or choice
Recall saves screen snapshots only if you opt in, stores them locally and requires Windows Hello to open them
Recall is available only on Copilot+ PCs and helps find previously viewed content. You must opt in to save snapshots, which are screen images with metadata like app name and time stamp, stored securely on the device and protected with Windows Hello Enhanced Sign-in Security. Each time Recall is opened you must authenticate with Windows Hello biometrics or a PIN to decrypt the content. Analysis and processing of snapshots occurs only on the device, and Click to Do runs on top of Recall snapshots to take actions on text or images on the screen.
Supporting quotations
Recall is a Windows feature available exclusively on Copilot+ PCs that helps users find previously viewed content using remembered text or visual clues.
To use Recall, users must opt-in to save snapshots — screen images with metadata like app name and time stamp — which are securely stored locally and protected with Windows Hello Enhanced Sign-in Security (ESS).
Each time Recall is opened, users must authenticate using Windows Hello biometric sign-in or PIN to decrypt snapshot contents. Analysis and processing of snapshots occur only on the device.
Qualifications & exceptions
Available only on Copilot+ PCs; requires opt-in.
Data Access & Collection · Company practice
The Camera app embeds location and device details in photos and videos if you allow location
If you allow the Camera app to use your location, location data is embedded in the photos and videos you take, along with other descriptive data such as camera model and date. If you share a photo or video, the embedded data is accessible to the people and services you share with. You can disable Camera location access by turning off location services in Settings or the app's access to them. When the Camera app is open it shows rectangles detected by the camera for image enhancement and does not retain image enhancing data. The app uses device capabilities including location, camera, microphone, video and picture library.
Supporting quotations
If you allow the Camera app to use your location, location data is embedded in the photos and videos you take with your device.
If you choose to share a photo or video, any embedded data will be accessible to the people and services you share with.
The Camera app does not retain any image enhancing data.
Qualifications & exceptions
Location is embedded only if you allow the Camera app to use it.
Data Access & Collection · Company practice
People and Mail and Calendar apps import contacts; Mail and Calendar also syncs your data to Microsoft servers
The People app centralizes contacts, importing them automatically when you add email and social network accounts, after telling you what data it can import or sync and letting you choose; other installed apps may also sync data into it, and you can remove accounts at any time. The Mail and Calendar app connects email, calendars and files from Microsoft and third-party providers. When you add an account, your email, calendar items, files, contacts and settings automatically sync to your device and to Microsoft servers, and the credentials you enter are sent to the third-party provider's server. If an organization provides the account, it can set policies such as multi-factor authentication or remote wipe. The app provides location-based services such as weather in your calendar, and you can remove accounts, change synced data or disable device capabilities like location and camera at any time.
Supporting quotations
The People app centralizes your contacts in one place by automatically importing them when you add accounts, including email and social network accounts.
Other apps you install may also sync data to the People app, including providing additional details to existing contacts.
your email, calendar items, files, contacts, and other settings from your account will automatically sync to your device and to Microsoft servers
To configure an account, you must provide the app with your account credentials (such as username and password), which will be sent to the third-party provider’s server.
If your account is provided by an organization (like a work account), the account owner can implement certain policies and controls that may affect your use of the app — for example, multi-factor authentication or the ability to remotely wipe data from your device.
You can remove an account, make changes to the data that’s synced from your account, or disable access to your device’s capabilities like your location and camera at any time.
Qualifications & exceptions
Mail and Calendar syncs to Microsoft servers, not only to the device.
Organization-provided accounts can carry remote wipe and other controls.
Data Access & Collection · Company practice
Operator Messages, Clock, Journal and PC Manager apps describe local storage, device access and cleanup scans
The Windows Operator Messages app shows account-related SMS from your mobile operator about your data plan, stores them locally on the device, lets you view and delete them, and uses device capabilities such as Contacts. The Clock app lets signed-in users enable Microsoft To Do, a cloud-connected experience; Focus Session data is stored locally and can be cleared in Clock settings, and Focus Sessions can connect to Spotify. Microsoft Journal is a note-taking app for touch and pen devices that uses AI and machine learning for handwriting recognition that processes data locally; users with Microsoft 365 can access their calendar and contacts, and Journal can use the photo library, camera and microphone. PC Manager, available in select regions, scans your device on request so you can delete unneeded files, optimize cache and stop or recover from unauthorized changes.
Supporting quotations
These messages are stored locally on your device. From your device, you can also access, view, and delete these messages.
When the user turns on Focus Session in Microsoft To Do, session data is stored locally, which you can clear by going to the Clock settings page.
Focus Sessions supports connecting to Spotify accounts to listen to ambient audio.
The app leverages AI and machine learning to better recognize your handwriting that processes data locally on your device.
Journal lets you access photos library and the device camera and microphone so that you can add them to a workbook.
Based on your request, PC Manager will scan your device, and allow you to delete unneeded or temporary documents, optimize cache, stop or recover from unauthorized changes, or use other features to improve your PC’s performance.
Qualifications & exceptions
PC Manager scans on your request; availability is by region.
Data Access & Collection · Company practice
PC Manager can send pop-up screenshots if you join a plan; Circle to Act screenshots are processed in Azure
PC Manager blocks pop-ups using ad-block rules and the pop-ups you select. If you agree to join the Microsoft PC Manager Pop-up Plan, you can send screenshots of the pop-ups you block, and Microsoft says it collects only the screenshots, window title and window class. Screenshots are retained only for a short period and regularly deleted, and you manage the plan in PC Manager settings. Feedback may include personal data you write, and is regularly deleted after processing. Circle to Act, offered in selected markets, includes Screenshot Tool, Text Extraction, Translation and Smart Copy. For Smart Copy, uploaded screenshots may be processed in data centers outside your location. For Text Extraction and Translation, screenshots are sent to Microsoft Azure operated by Microsoft or local partners in your region and results are returned to you. Microsoft says it does not keep the images, text or results except where legally required.
Supporting quotations
If you agree to join the “Microsoft PC Manager Pop-up Plan,” when you block pop-up windows through custom block, you can help us optimize Microsoft PC Manager's pop-up management feature by taking screenshots of the pop-up and sending them to Microsoft.
Microsoft does not collect information other than screenshots, Windows title, and the class of Windows. Screenshots are only retained for a short period of time and regularly deleted.
To enable the Smart Copy feature, screenshots you upload during use may be processed by Microsoft in data centers located outside of your location.
Microsoft does not retain any image or text data you submit or the results provided, except where required to comply with legal obligations.
Qualifications & exceptions
Pop-up screenshots are sent only if you agree to join the plan.
Circle to Act is offered in selected markets.
Retention for pop-up screenshots is "a short period", with no number given.
Not stated here
The retention period for pop-up screenshots is not stated.
Data Access & Collection · Company practice
Snipping Tool and Sound Recorder capture screenshots, screen recordings and audio and store them on your device
The Snipping Tool uses your microphone and picture library to capture and store screenshots and screen recordings, and its Text Action feature uses built-in OCR so you can select and copy text from images. Copied items also go to your clipboard, and if you enable clipboard history across devices, the copied content can be used on other devices. You manage clipboard and snipping preferences in Windows settings. The Sound Recorder app captures audio through your microphone, lets you mark moments, trim and adjust, and autosaves recordings to your Documents folder where you can share them.
Supporting quotations
The Snipping Tool uses your microphone and pictures library to capture and store screenshots and screen recordings.
If you enable clipboard history across devices, the copied content can be used seamlessly across different devices.
Your recordings are autosaved and stored in your Documents folder for easy access, and you can share your recorded audio with friends and family.
Qualifications & exceptions
Cross-device clipboard use applies only if you enable clipboard history across devices.
Data Access & Collection · Company practice
Clipchamp collects imprecise location, and Media Player and Movies & TV send identifiers or collect viewing data
Clipchamp is a video editor that saves finished videos to your device or personal OneDrive; you can allow it to access your camera and microphone, and it collects your imprecise location to provide a better experience, such as choosing which language to show. Media Player reads multimedia files you open and your Music and Video library folders to build its library pages. To show artist and album art it sends Microsoft an information request containing standard device data (IP address, software version, regional and language settings) and a content identifier, and you can disable this on the app's Settings page. Movies & TV collects data about the movies and TV shows you watch, including the length of play and ratings you give, to help you discover content, and needs access to your video library to play local video files.
Supporting quotations
Clipchamp will collect your imprecise location to provide a better experience, such as choosing which language to display to you.
When you open Media Player, it will read the contents of your Music library and Video library folders
Media Player sends an information request to Microsoft containing standard device data, such as your device IP address, device software version, your regional and language settings, and an identifier for the content. You can disable this feature on the app’s Settings page.
Movies & TV will collect data about what movies and TV shows you watch, including the length of play and any ratings you give.
it needs access to the video library on your device
Qualifications & exceptions
Media Player art lookup can be disabled in its settings.
Data Access & Collection · Company practice
Windows Hello stores a template of your face, fingerprint or iris on your device and not the image
If you turn on Windows Hello, it uses unique points or features extracted from your face, fingerprint or iris, stored on your device as a template to identify you, and it does not store the actual image. Microsoft says biometric verification data used at sign-in does not leave your device and stays there until you remove it. After a significant period of Windows Hello inactivity, you are prompted to confirm you want to keep storing the data. You can delete your biometric verification data in Settings.
Supporting quotations
If you turn it on, Windows Hello uses unique points or features that are extracted from your face, fingerprint, or iris and stored on your device as a template to identify you—but it does not store the actual image of your face, fingerprint, or iris.
Biometric verification data that's used when you sign in doesn't leave your device and remains on your device until you remove it.
After a significant period of Windows Hello inactivity, you will be prompted to confirm that you want to continue to store your biometric verification data. You can delete your biometric verification data from within Settings.
Qualifications & exceptions
Applies only if you turn on Windows Hello.
Data Access & Collection · Company practice
Entertainment services collect identifiers, interactions, chat partners, uploaded content and purchases
Entertainment and related services such as Xbox, Microsoft Store and MSN give access to content, apps and games. Microsoft says it collects and uses your information depending on how you use them, for example your unique identifiers, how you interact with the services, who you chat with, content you upload and products you search for and buy.
Supporting quotations
We collect and use your information depending on how you use these services to fuel your experience – for example, we collect your unique identifiers, information about how you interact with in these services, who you chat with, what content you upload, and products you search for and buy.
we collect your unique identifiers, information about how you interact with in these services, who you chat with, what content you upload, and products you search for and buy
Data Access & Collection · Company practice
Xbox consoles get a device ID; Microsoft collects sign-ins, purchases, play, performance, content and social data
When you sign in to Xbox experiences, Microsoft assigns a unique identifier to your device, and when a console is online and you sign in it identifies which console and operating system version you use. Data collected about your use of Xbox services, games, apps and consoles includes sign-in and sign-out times, purchases and content obtained; games and apps used, progress, achievements and play statistics; performance data about consoles, Game Pass, apps, the network, accessories and your connection, including errors; content you add, upload or share, including text, pictures and video; and social activity such as chat data, interactions with other gamers and friends and followers. If you use Xbox on another device with storage, usage data is stored there and sent to Microsoft the next time you sign in, even if you played offline.
Supporting quotations
When you sign in to XBOX experiences—in apps or on a console—we also assign a unique identifier to your device.
When you sign in and sign out of XBOX, any purchases you make, and content you obtain.
Which games you play and apps you use, your game progress, achievements, play time per game, and other play statistics.
Performance data about XBOX consoles, XBOX Game Pass and other XBOX apps, the XBOX network, connected accessories, and your network connection, including any software or hardware errors.
Content you add, upload, or share through the XBOX network, including text, pictures, and video you capture in games and apps.
Social activity, including chat data and interactions with other gamers, and connections you make (friends you add and people who follow you) on the XBOX network.
usage data will be stored on the storage device and sent to Microsoft the next time you sign in to XBOX, even if you’ve been playing offline
Qualifications & exceptions
Usage data from offline play is sent the next time you sign in.
Data Access & Collection · Company practice
Xbox diagnostic data has required and optional levels, and child accounts send only the minimum required data
Xbox diagnostic data has two categories, required and optional. Required diagnostic data for Xbox includes information about your device, service performance, how you use products, apps and services, game activity and your settings and capabilities. If your child uses an Xbox console, only the minimum required diagnostic data is sent to Microsoft to keep Xbox safe, secure and performing as expected, and optional diagnostic data collection is turned off for child accounts.
Supporting quotations
Required diagnostic data for XBOX includes information about your device, service performance, how you use our products, apps and services, game activity, and your settings and capabilities.
only the minimum required diagnostic data is sent to Microsoft to help keep XBOX safe, secure, and performing as expected. Optional diagnostic data collection is turned off for child accounts.
Qualifications & exceptions
Optional diagnostic data collection is off for child accounts.
Data Access & Collection · Company practice
Other players can capture your character, gamertag and audio chat, and party chat captions are stored as text
Any player in a multiplayer game session can record video clips and take screenshots of their view, and other players' clips and screenshots can capture your in-game character and gamertag during that session; if a player captures clips they might also capture audio chat, depending on their settings. During Xbox party chat, a player can turn on a voice-to-text feature that captions all voice communication in the party for that player. Microsoft uses the resulting text to provide captioning for players who need it, and may also use it to provide a safe gaming environment, enforce the Community Standards for Xbox and for the other purposes described in the statement.
Supporting quotations
Other players’ game clips and screenshots can capture your in-game character and gamertag during that session. If a player captures game clips, they might also capture audio chat, depending on their settings.
If a player activates this feature, all voice communication in the party is captioned for the player.
This data may also be used to provide a safe gaming environment and enforce the Community Standards for XBOX as well as the other purposes described in this statement.
Qualifications & exceptions
Captioning is activated by a player and covers all voice communication in the party.
Audio capture depends on the capturing player's settings.
Data Access & Collection · Company practice
Xbox anti-cheat tools may create hashes from browser, device, activity, game and OS information
Microsoft prohibits cheating, hacking, account stealing and other unauthorized or fraudulent activity when you use an Xbox online game or any network-connected app on Xbox, PC or mobile. To detect and prevent fraud and cheating, it may use anti-cheat and fraud prevention tools and technologies that may create digital signatures, known as hashes, using certain information collected from your device and how you use it. That can include information about the browser, device, activities, game identifiers and operating system.
Supporting quotations
In order to detect and prevent fraud and cheating, we may use anti-cheat and fraud prevention tools, applications, and other technologies.
Such technologies may create digital signatures (known as “hashes”) using certain information collected from your XBOX console, PC, or mobile device, and how you use that device. This can include information about the browser, device, activities, game identifiers, and operating system.
Qualifications & exceptions
Stated as "may"; the information "can include" the listed items.
Data Access & Collection · Company practice
Legacy Xbox 360 collects limited required diagnostic data, and Kinect uses a camera, microphone and infrared sensor
The Xbox 360 console collects limited required diagnostic data to keep the console working while connected to the Xbox network. The Kinect sensor combines a camera, microphone and infrared sensor so that motion and voice can control gameplay in supported titles, and a separate Xbox Kinect and Privacy page is linked and not supplied here.
Supporting quotations
This XBOX console collects limited required diagnostic data to keep your console functioning as expected while using a console connected to the XBOX network.
The Kinect sensor is a combination of camera, microphone, and infrared sensor that can enable motions and voice to be used to control gameplay for titles that support it.
Not stated here
The Xbox Kinect and Privacy page is not part of the supplied text.
Data Access & Collection · Company practice
Microsoft Store collects browsing, purchase and install activity, links reviews to your account and may check your age
Microsoft Store is an online storefront for apps, games, subscriptions and digital content. Microsoft collects information about your interactions with it: products you browse, search, view, add to wish lists or carts, acquire, subscribe to, purchase, install, update, use, delete or ask for support about, your viewing settings and preferences, and ratings, reviews and problem reports you submit. Your Microsoft account is linked to your ratings and reviews, and the name or picture on your account may be shown with a review you post. It uses your device region settings to present content and your device identifier to manage product rights tied to your device. Depending on your jurisdiction you may need to verify your age to view or acquire age-restricted content; a notice explains the data collected and the third-party verification provider.
Supporting quotations
We collect information about your interactions with Microsoft Store, including: the products you browse, search for, view, add to wish lists or shopping carts, acquire, subscribe to, purchase, install, update, use, delete, uninstall, or for which you request customer support
Your Microsoft account is linked to your ratings and reviews, and the name and/or picture associated with your Microsoft account may be shown with any review you post.
Microsoft Store also uses your device’s region settings to present relevant content and merchandising, and your device identifier to manage product rights tied to your device.
Depending on your jurisdiction, you may need to verify your age to allow you to view or acquire certain age-restricted content on Microsoft Store.
Microsoft Store is an online service
Qualifications & exceptions
Age verification depends on your jurisdiction.
Not stated here
The age verification notice and its third-party provider are not part of the supplied text.
Data Access & Collection · Company practice
MSN apps collect installation and device data, and the weather app uses your location
MSN (formerly Microsoft Start or Microsoft News) is a content service for news, weather, sports and finance, available on several platforms and included in Edge and Windows widgets. When you install the MSN app, MSN Weather or Microsoft News apps, Microsoft collects data on whether the app installed properly, the installation date, app version and device details such as operating system and browser, on a regular basis to count users and find performance problems. When you use the weather app, it uses your location to provide relevant weather content.
Supporting quotations
MSN (formerly known as Microsoft Start or Microsoft News) is a content service that includes news, weather, sports, and finance.
we collect data that tells us if the app was installed properly, the installation date, the app version, and other data about your device such as the operating system and browser
When you use the weather app, we use your location to provide you with relevant weather content.
Data Access & Collection · Company practice
Mixed Reality uses headset sensors, collects diagnostic data and body-joint measurements, and processes gestures locally
Windows Mixed Reality uses a compatible headset's camera, microphone and infrared sensors so motion and voice can control games and apps. Microsoft collects diagnostic data to solve problems and keep Mixed Reality up to date, secure and working, and to improve products depending on your diagnostic data settings. It maps distances between your body's joints to make a stick figure representation of you and, if you are online, collects those numeric values to enable and improve the experience. Hand gestures for simple system interactions are processed on your PC and not stored. The headset's microphones enable voice commands for games, apps and searches, and Mixed Reality can also be used for audio and video communications.
Supporting quotations
Mixed Reality uses a compatible headset’s camera, microphone, and infrared sensors to enable motions and voice to be used to control gameplay and to navigate apps and games.
Microsoft collects diagnostic data to solve problems and to keep Mixed Reality running on Windows up to date, secure, and operating properly.
Mixed Reality maps distances between your body's joints to create a stick figure representation of you. If you are connected to the Internet, we collect those numeric values to enable and improve your experience.
This data is processed on your PC and is not stored.
The headset's microphones enable voice commands to control games, apps, or to enter search terms.
Windows Mixed Reality can also be used for audio and video communications.
Qualifications & exceptions
Body-joint values are collected only when you are connected to the Internet.
Diagnostic data use for improvement depends on your diagnostic data settings.