Every copy of Windows arrives with a long list of data collection habits already switched on. During setup you click through a few screens, and the defaults let Microsoft gather diagnostic data, an advertising ID, your approximate location, and details about how you search and type. Most people never open those screens again. That is not a hidden conspiracy. It is a default, and defaults are designed to favor the company that shipped them. The good news is that Windows also gives you a control panel for every one of those features. This guide walks through the settings that matter, in plain language, so you can decide what leaves your machine and what stays on it.
You do not need to be technical to fix this. The main privacy controls live in a single spot under Settings, and Microsoft runs a second layer through the Windows Privacy Dashboard online. Together those two places cover almost every collection feature a normal person cares about. A full pass takes about 15 minutes. Once you know the path, rechecking after a big Windows update takes five. That matters more than it sounds, because feature updates sometimes flip toggles back to their original positions without telling you. Treat this as a tune-up rather than a one-time repair.
The stakes are small on any given day and larger over years. Ad profiles shape what you see and what gets offered to you. Breach data feeds scams that mention your real address and your bank’s name. The FTC’s Consumer Sentinel Network recorded more than $12.5 billion in reported fraud losses in 2024, with identity theft a persistent category. If you have ever wondered why removing yourself from the internet is worth the effort, this is the reason. Your Windows PC is one of many faucets feeding profiles about you. Tightening it will not make you invisible, but it removes a steady drip you can actually control.
| Setting | Where to Find It | What It Controls | Suggested Choice |
|---|---|---|---|
| Diagnostic data | Privacy and security > Diagnostics and feedback | Crash reports, app usage, and hardware details sent to Microsoft | Required only |
| Advertising ID | Privacy and security > General | A device identifier apps use to personalize ads | Off |
| Tailored experiences | Privacy and security > Diagnostics and feedback | Suggestions in Settings and Start built from your data | Off |
| Location | Privacy and security > Location | Approximate or precise position shared with apps | Off, unless you use Find My Device |
| Activity history | Privacy and security > Activity history | Uploads of apps and files you opened to your account | Turn off upload and clear history |
| Speech and inking | Privacy and security > Speech, Inking and typing | Samples used to improve dictation and handwriting | Off, unless you rely on voice typing |
What Does Windows Actually Collect About You?
Windows groups its data collection into categories, and each one has its own switch. The biggest is diagnostic data. That covers crash reports, app usage, hardware details, and performance information sent to Microsoft. You can set it to Required only. That keeps the minimum needed for security patches and stability while dropping the optional extras.
The advertising ID is another piece. Windows gives your device a unique identifier that apps can read to build an ad profile based on your behavior. Turning it off does not remove ads, but it stops apps from using that identifier to personalize them across your device.
Location, speech and inking personalization, activity history, and per-app permissions finish the list. A few of these power features you may genuinely want. Find My Device needs location access to help you find a lost laptop. Voice typing gets more accurate with speech data. So treat this as a tradeoff list rather than a checklist where every item must go. For a wider view of who buys this kind of data and why, see our complete guide to data brokers.
One more detail worth knowing. The levels changed between Windows 10 and Windows 11. Windows 10 offered Basic, Enhanced, and Full. Windows 11 simplified that to Required and Optional. If you are still on Windows 10, pick Basic. On Windows 11, pick Required.
- Diagnostic data: crash logs, app usage, performance and hardware details sent to Microsoft
- Advertising ID: a per-device identifier apps use to personalize ads
- Location: approximate or precise positioning used by maps, weather, and Find My Device
- Activity history: a timeline of apps and files you opened, sometimes synced to your account
- Speech and inking personalization: samples used to improve dictation and handwriting recognition
- App permissions: camera, microphone, contacts, calendar, and file access for each app
- Tailored experiences: Windows using your data to suggest content in Settings and Start
How Do You Get to the Windows Privacy Settings?
You can find almost everything in one place. On Windows 11, click Start, then Settings, then Privacy and security in the left column. On Windows 10, the path is Start, Settings, then Privacy. If hunting through menus annoys you, press the Windows key and type the word privacy. The top result takes you straight there.
From that screen you get a list down the left side. General, Speech, Inking and typing personalization, Diagnostics and feedback, Activity history, Search permissions, and more. Click each one and read the toggles. They are mostly simple on and off switches, and each has a plain description underneath. Nothing here is permanent, so you can experiment without fear.
Microsoft also runs a separate privacy dashboard at account.microsoft.com/privacy. That page shows the browsing, search, location, and voice data tied to your Microsoft account. You can view it, download a copy, or clear it. It is a different layer than the device settings, so check both if you sign in with a Microsoft account. The FTC publishes plain-language guidance on protecting personal information, and it is a useful companion read while you work through the list.
A few settings grayed out usually means you are not signed in as an administrator, or your workplace manages the device through group policy. On a personal laptop, sign in with an admin account and the switches will be available.
Which Privacy Settings Should You Turn Off First?
Start with the General page. Turn off the toggle labeled ‘Let apps show me personalized ads by using my advertising ID.’ Turn off ‘Let websites show me locally relevant content by accessing my language list.’ And turn off ‘Let Windows improve Start and search results by tracking app launches.’ Those three take about 30 seconds combined.
Next, open Diagnostics and feedback. Set diagnostic data to Required only. Turn off any separate toggle for optional diagnostic data. Turn off ‘Improve inking and typing’ and ‘Tailored experiences.’ Then set feedback frequency to Never, so Windows stops asking you for opinions it does not need.
Finally, walk the rest of the list. Under Speech, turn off online speech recognition unless you use voice typing daily. Under Activity history, uncheck the box that sends your activity to Microsoft and clear the local history. Under Location, turn access off entirely if you never use Find My Device, or leave it on and deny access app by app. Under App permissions, strip camera, microphone, and file access from anything that clearly does not need it. A weather app does not need your contacts.
One note on timing. Windows feature updates sometimes restore defaults. Recheck the General and Diagnostics pages after any large update. It takes about two minutes and saves you from starting over.
- Advertising ID: off
- Tailored experiences: off
- Diagnostic data: Required only
- Feedback frequency: Never
- Online speech recognition: off, unless you dictate often
- Activity history upload: off, and clear what is already stored
- Suggested content in Settings: off
- Find My Device: on if you travel with the laptop, off if it never leaves your desk
What About Copilot, Recall, and Your Microsoft Account?
Copilot is Microsoft’s AI assistant, and it is woven into Windows 11, Edge, and Office. When you use it, your prompts and the responses get stored in your Microsoft account so you can return to them later. That history sits in the same privacy dashboard mentioned earlier, and you can delete it there. If you would rather skip Copilot entirely, unpin it from the taskbar and turn it off in Settings under Apps, then Installed apps.
Recall is the bigger conversation starter. On Copilot+ PCs it takes periodic snapshots of your screen so you can search your own past activity later. Microsoft says the snapshots are encrypted, stored locally, and require Windows Hello before anyone can view them. The feature is opt-in. You can turn it off completely under Privacy and security, and you can exclude specific apps or websites from being captured. If you never asked for it, switching it off costs you nothing.
Your Microsoft account carries a second set of data habits. The dashboard at account.microsoft.com/privacy shows search history, Edge browsing history, location history, and voice clips. A separate page at account.microsoft.com/privacy/ad-settings lets you turn off personalized ads tied to your account. Clearing that history does not erase it from Microsoft’s ad systems overnight, but it stops new entries from piling up.
Edge deserves its own pass. Under Settings, then Privacy, search, and services, set tracking prevention to Strict or Balanced. Turn off the search suggestions that send keystrokes to Bing as you type. These are small steps, but each one reduces what leaves your device.
Do Windows Privacy Settings Stop Data Brokers?
Short answer: no. The settings on your PC control what Microsoft and your installed apps collect. Data brokers work a different angle entirely. They buy and scrape from public records, court filings, property deeds, voter rolls, loyalty programs, mobile apps, and breach dumps. A broker may never touch your Windows machine and still know your address, phone number, relatives, and shopping habits. The Identity Theft Resource Center has tracked thousands of data compromises per year, and breach data is one of the raw materials these companies and scammers feed on.
Still, the toggles help. Fewer signals leaving your device means less material to aggregate and resell. Think of it as turning off one faucet in a house with several running. The rest of the work happens off your machine, and it is the part most people skip. You can start by learning how to opt out of data brokers one at a time, which is free but repetitive.
If the manual route feels endless, removal services do the filing for you. Our breakdown of the best data removal services in 2026 compares the major options, and Incogni is one of the tools worth putting side by side with the rest. Pricing and coverage vary a lot, so match the service to how many brokers you want to chase.
One honest note. Opt-outs are not permanent. Brokers re-list old records when they refresh their databases, which is why a scheduled recheck every few months beats a one-time purge.
- Public records: property deeds, voter files, court filings, and business registrations
- Commercial sources: loyalty cards, mobile apps, warranty cards, and sweepstakes entries
- Breach dumps: stolen credentials and personal details bought on criminal forums
- Ad networks: cookie and device identifiers that link your activity across sites
How Do You Keep Your Windows PC Private Over Time?
A one-time cleanup drifts. Set a repeating reminder every three months and run the same short list. Check the General and Diagnostics pages first, because those are the two updates tend to reset. Then clear any new activity history your account picked up. The whole routine fits inside a coffee break.
Next, decide how you sign in. A local Windows account keeps your device identity separate from your Microsoft account, which means less profile data tied to one login. You give up some conveniences, like easy settings sync and Find My Device. For many people, that trade is worth it. You can switch a Microsoft account to a local account from the Accounts page in Settings.
Turn on device encryption, which is BitLocker under the hood on most modern machines, and store the recovery key somewhere safe. Encryption will not stop data collection, but it protects your files if the laptop is lost or stolen. Pair that with a screen lock that requires a PIN or biometrics, not just a swipe.
Then cover the gaps Windows cannot. A password manager keeps you from reusing credentials across sites, which is how a single breach turns into five. Our guide to the best password managers in 2026 covers the practical choices. A VPN hides your traffic from whatever network you join, which matters on hotel and cafe Wi-Fi, and the best VPN services in 2026 roundup explains what to compare. Change your habits slowly and they stick.
Frequently Asked Questions
Does turning off Windows privacy settings break anything?
No, and that is the point. The features you disable are mostly personalization and reporting. Your programs, files, updates, and security patches keep working normally. You may lose slightly better ad targeting, which is the goal.
Will privacy settings stop all ads in Windows?
Not all of them. Turning off the advertising ID stops apps from using that identifier to personalize ads across your device. You will still see generic ads in some apps, the Start menu suggestions, and Edge. You can also disable suggested content in Settings to cut those down.
Can Microsoft read my files and photos?
Microsoft does not scan your personal files for content, but some features send related data, such as file names in crash reports or search history when you use Bing. Turning on device encryption protects your files if the laptop is stolen. Reviewing app permissions limits which programs can reach your camera, microphone, and documents.
Do I need a Microsoft account to use Windows 11?
Microsoft pushes you toward one during setup, but you can install Windows 11 with a local account using a few workarounds. A local account keeps your device identity separate from one big profile, though you lose settings sync and Find My Device.
How often should I recheck my Windows privacy settings?
Every three months is a reasonable habit, plus once right after any large feature update. Updates occasionally restore defaults you already changed. The recheck itself takes about two minutes.
Are third-party privacy tools for Windows safe to use?
Some are, but many are outdated or bundled with unwanted software. Stick to the built-in Settings app first, since it covers nearly everything a normal user needs. If you try a third-party tool, download it only from the developer’s official site.
What Should You Remember?
- Start with the General page in Settings to switch off the advertising ID and tailored experiences.
- Set diagnostic data to Required only so Windows stops sending optional usage and crash details.
- Clear your Microsoft account history at account.microsoft.com/privacy on a regular schedule.
- Recheck after every feature update because Windows sometimes quietly restores defaults.
- Windows toggles do not stop data brokers, so plan a separate opt-out effort for your public listings.
- Close the gaps Windows cannot, with a password manager for logins and a VPN for public Wi-Fi.
- Give up only what you use, since location and speech data power features some people rely on daily.
This article is for general informational purposes only and is not legal or financial advice. Data broker policies, privacy laws, and service pricing change frequently, so verify current details with the official source before acting. Some links may be affiliate links that support this site at no cost to you.
