Have you ever considered how much personal data your Windows 11 PC sends to Microsoft and other applications without you lifting a finger? The default system installation is designed to "improve the experience," but in practice, it means that far more information is collected and shared than most users realize.
The good news is that you don't need to be a system administrator or a cybersecurity expert to take control of that information. With a few configuration changes, you can decide what gets synced, what gets stored, what gets tracked, and what doesn't. It will only take a few minutes, and you'll significantly reduce your digital footprint on Windows 11.
Why does Windows 11 collect so much data and what does the GDPR say?
The controversy surrounding privacy in Windows is nothing new. Many people assume that Windows 11 spies more than Windows 10, but the reality is that both systems share virtually the same data collection policy since Microsoft adjusted its practices starting with Windows 10 version 1903.
It's important to distinguish between mandatory and optional data . Mandatory data is what the system needs to function, update correctly, detect hardware compatibility, and maintain a basic level of security. This data is usually technical (device model, error information, system version) and is collected anonymously. It cannot be disabled, but it's also not the data that most significantly affects your privacy.
The real impact on your privacy comes from optional data and added services : ad personalization, activity history, location, dictation and voice, detailed app usage, cross-device synchronization, AI chatbots , programs like Windows Insider, Windows Search, Spotlight, Mobile Link, Find My Device, or the personalized dictionary.
From the perspective of the GDPR (General Data Protection Regulation), there's a key principle: data minimization . In other words, only the data that is strictly necessary should be shared. Adjusting your Windows 11 privacy settings is a practical way to apply this principle in your daily life.
Configure the database: Privacy and security menu in Windows 11
The central hub for managing your information in Windows 11 is the "Privacy and security" section of the Settings app. From there, you can access both general options and specific permissions for each type of data: location, camera, microphone, activity history, diagnostics, etc.
To access this panel, open Start > Settings > Privacy & security . The main page displays a summary with several sections: Windows permissions (activity history, search, general), app permissions (camera, microphone, location, notifications, contacts, etc.), and diagnostic and feedback options. Each section gives you a different level of control over your data.
Microsoft lets you "choose how much information you want to share with them," but the reality is that many of the boxes that involve more tracking are checked by default . That's why it's so important to take a few minutes to review everything, especially after installing the system or after a major feature update.
A good habit is to review these privacy settings whenever you notice changes to the system (new features, assistants, cloud integrations) or after accepting the terms of a Microsoft service. Often, these new features bring with them new data collection checkboxes that, if left untouched, remain enabled.
Activity history: what Windows 11 records and how to limit it
Activity history is one of the most sensitive privacy features in Windows 11. This feature keeps a record of the applications you use, the documents you open, and, in some cases, the websites you visit, with the aim of making it easier for you to pick up where you left off on any device linked to your account.
If you'd rather your PC not act as a "diary" of everything you do, you should adjust this setting . Go to Settings > Privacy and security > Activity history and turn off the storage of your history on your device. There you'll also find buttons to delete the data already collected.
In addition to the local portion, your history can be synced with the Microsoft cloud to ensure continuity across devices. If you don't want to leave a trace on other devices, uncheck any options that refer to sending your history to Microsoft or your cloud account, and use the deletion options to remove anything already uploaded.
This setting is especially recommended if you share a computer , work with sensitive information, or simply don't want your computer to remember every document you've opened. Think of it as clearing your browser history, but applied to the entire system.
Location and tracking services: how far you want to be located
Both Windows 10 and Windows 11 include location services that allow you to know where you're using your computer. This can be useful for map applications, weather forecasts, or features like "Find My Device," but it also opens the door to constant tracking of your movements for commercial or statistical purposes.
If you're not comfortable with your computer telling the system where you are, go to Settings > Privacy and security > App permissions > Location . There you can completely disable "Location services" for all users of the computer and stop tracking altogether.
Another option is to keep location services enabled, but decide who can use them on a case-by-case basis . On that same screen, you'll find a list of Microsoft Store apps and, further down, the section for desktop applications. You can block global access and authorize only those tools that actually need to know your location.
Don't forget that location is also linked to features like "Find My Device ." If you want to maximize your privacy, in Settings > Privacy and security > Find My Device you can delete the record of saved locations and disable the feature so that Windows stops storing that information in your Microsoft account.
Advertising ID and personalized ads: less commercial profiling
Windows 11 assigns each user an Advertising ID, which allows for the creation of an interest profile. This profile is used to display personalized ads within Microsoft apps and services, and in some cases, it is shared with third parties for targeted marketing campaigns.
To reduce this type of tracking, go to Settings > Privacy and security > General and turn off the option that allows apps to show personalized ads using your advertising ID. While you're at it, also uncheck any boxes related to tracking how you use apps or improving your experience based on your history.
Keep in mind that disabling advertising ID doesn't make ads disappear completely, but it does prevent them from being specifically targeted to you . In practical terms, you reduce the amount of data about your behavior that's associated with a unique identifier.
If you also want to limit personalization online, you can access the Microsoft Privacy Dashboard with your account and disable options such as "see ads that may interest you" or "share my data with third parties for personalized ads." This affects advertising linked to your account on the web and in services like Bing or the Microsoft Store.
Application permissions: camera, microphone, and other sensors
A fresh installation of Windows 11 tends to be quite generous with application permissions. Audits performed on clean systems have revealed more than a dozen apps with automatic location access and active permissions to use the camera, microphone, or other sensitive resources.
To review these permissions, you can follow two main paths . The first is from Settings > Privacy and security > App permissions , where you'll see categories like Camera, Microphone, Location, Notifications, Contacts, etc. In each category, you can block global access or authorize it only for specific apps.
The second route is through Settings > Apps > Installed apps . There you can open the advanced options for each app (from the three-dot menu) and adjust its permissions individually, whether they are Microsoft Store apps or traditional desktop programs.
Microsoft acknowledges in its privacy documentation that these permissions grant access to highly sensitive hardware . If an application you don't need is using your microphone, camera, or location, it's a good idea to revoke them. While you're at it, you can uninstall bloatware and pre-installed programs you don't use that might be collecting unnecessary telemetry.
Diagnostic data and comments: basic vs optional telemetry
Windows 11 continuously sends diagnostic data to Microsoft to identify errors, measure performance, and check compatibility. This telemetry is divided into two blocks:
- Required (mandatory) data.
- Optional data (more detailed, theoretically intended to "improve the product").
The mandatory part can't be disabled, but you can minimize everything else . Go to Settings > Privacy and security > Diagnostics and feedback (or Feedback and diagnostics, depending on the version) and turn off the option to send optional diagnostic data. The system will still report what's necessary for updates and security, but it will stop sending additional information about how you use apps.
On that same screen, it's also advisable to disable features such as "Improve handwriting and inking ," which can send Microsoft examples of what you type or dictate, and "Personalized Experiences," which use your diagnostic data to show tailored recommendations and suggestions.
Locate the button to delete stored diagnostic data and run it. This will erase information already collected from your device and your account. This is especially useful if you've had the extended options enabled for a long time without realizing it.
Diagnostic data viewer: auditing what comes out of your PC
If you want to go a step further and see what Windows is actually sending to Microsoft, you can use the Diagnostic Data Viewer . This is an official tool that displays telemetry events in structured formats (usually JSON) so you can see in detail what information your computer is sending.
To activate it, go to Settings > Privacy and security > Diagnostics and feedback and enable the "View diagnostic data" option . The system will offer to download the application from the Microsoft Store. Once installed, you can review each log entry with its date, event type, and category (Windows kernel, diagnostic services, problem reports, etc.).
The viewer allows you to filter by keyword and category . For example, if you type "microphone" or "location," you'll see all entries related to those hardware components. It's a very powerful tool, although somewhat technical, so it's generally geared more towards advanced users or security audits.
A useful trick is to periodically review the viewer after "cleaning" the telemetry. Many users temporarily stop the DiagTrack service from PowerShell with commands like `Stop-Service -Force DiagTrack` , wait for the pending data to be sent, and then analyze what remains logged. Saving some of that JSON data in an encrypted document can help you maintain your own audit history.
Microsoft Privacy Dashboard: Clean up stored traces
Even if you adjust your system settings, Microsoft may already have a good record of your activity on its servers: searches, browsing with Edge, saved locations, voice activity, use of cloud services, etc.
To review and delete this trace, you can use the online Privacy Dashboard . Simply open your browser, go to the Microsoft Privacy Dashboard page, sign in with your account, and navigate to the Privacy > Privacy Dashboard section.
From there you can view categories such as location history, browsing history, and voice activity . Each section allows you to review and delete data individually or, if you prefer, delete an entire block at once.
It's advisable to check in from time to time to ensure you're not accumulating information you no longer need. Think of it like tidying your digital home : every so often, it's a good idea to throw away old papers and documents that no longer serve a purpose, to prevent them from falling into the wrong hands.
Protection levels according to your level of exposure
Not all users need the same level of privacy . Someone who uses a PC for gaming, browsing, and watching TV shows is not in the same situation as someone who handles customer data, financial information, or sensitive company projects.
- For a “basic” profile For those who simply want a little more peace and quiet, disabling activity history, limiting location access to a few apps, removing the advertising ID, blocking optional diagnostics, and reviewing camera and microphone permissions are usually sufficient. It's a reasonable balance between convenience and privacy.
- In an “intermediate” or moderate risk profile (freelancers, professionals who work with clients, students who manage private projects), it is already advisable to go a step further: strict control over OneDrive, disable shared experiences, limit Copilot and perform periodic cleanups in the Privacy Dashboard.
- For a “high” profile (businesses, activists, journalists, staff with particularly sensitive data), all of the above is usually combined with regular audits of the Diagnostic Data Viewer, stricter firewall policies, additional encryption tools, account segmentation and, often, professional support specializing in cybersecurity and regulatory compliance.
Other useful settings to strengthen your privacy in Windows 11
Beyond the extensive telemetry and synchronization options, there are a number of small adjustments that also add protection . These are quick changes that, if applied all at once, significantly reduce the exposed area.
- En Search permissions Within Privacy and security, you can disable the saving of search history in Windows Search. If it was already enabled, you can also delete your previous history from the same screen.
- From Windows Update > Advanced options > Distribution optimization You have the option to prevent your PC from sharing updates with other computers (both on your local network and the internet). Disabling "Allow downloads from other computers" reduces the amount of data traffic leaving your device and going to third parties.
- If you don't want your files to be automatically uploaded to the cloud, check your OneDrive settings. From its icon in the notification area, go to Settings > Account and select “Unlink this PC” if you prefer to manage your documents exclusively locally.
- Finally, don't forget the role of the firewall and integrated antivirusConfiguring Windows Defender to perform regular scans, keeping security updates enabled, and reviewing firewall rules helps block unwanted connections and defend against threats. phishing attacks so that unknown applications don't start sending data to the Internet without you noticing.
Protecting your privacy in Windows 11 isn't about paranoia, it's about basic digital hygiene . Just like you check locks before leaving on a trip, it makes sense to check what permissions your system has and what information it actually shares. With a few adjustments in "Privacy and security," a firm hand with cloud syncing, and an occasional review of the Microsoft Privacy Dashboard, your computer will go from working for the third-party data ecosystem to being much more aligned with your own interests and level of exposure.