Windows 11 doesn’t come with a master privacy switch. You won’t find a single toggle that turns off all data collection. Instead, Microsoft has spread privacy controls across a web of settings, buried in the operating system, browser, and cloud services. For those who value their digital privacy, tuning Windows 11 requires a methodical walk through diagnostics, advertising identifiers, app permissions, and newer AI features like Copilot. This guide breaks down every critical privacy setting in Windows 11 version 24H2 (build 26100) and explains what each one does—and what it doesn’t.

Diagnostic Data: The Heart of Telemetry

The most significant privacy setting in Windows 11 is diagnostic data. Microsoft collects information about how you use your PC, including app crashes, feature usage, and sometimes even the websites you visit. In Windows 11, you have two choices: Required diagnostic data and Optional diagnostic data. There is no “off” switch for basic telemetry.

Required diagnostic data includes limited information about your device, its settings, capabilities, and whether it’s performing properly. Optional diagnostic data goes further—it collects details about the websites you browse (if you use Edge or other Microsoft services), how you use apps and features, and additional activity logs to help improve products.

To change this, open Settings > Privacy & security > Diagnostics & feedback. Here, you can toggle the switch from Optional to Required. If you’re privacy-conscious, select Required diagnostic data. But know that even Required data still sends some information to Microsoft; it’s the minimum they need for security updates and essential telemetry.

Below the diagnostic data toggle, you’ll find additional options:
- Improve inking and typing: This sends your typing and handwriting data to Microsoft to improve recognition. Turn it off unless you need better typing predictions.
- Tailored experiences: This uses your diagnostic data to show personalized tips, ads, and recommendations. Disable it.
- View diagnostic data: This lets you review the data Microsoft has collected. You can delete it from the Diagnostics & feedback page.

Note: Deleting diagnostic data does not stop future collection; it only removes what’s already stored.

Advertising ID: Stop Cross-App Tracking

Every Windows 11 device has a unique advertising identifier, which allows apps to show you targeted ads based on your usage. If you’ve ever searched for a product and then seen ads for it in other apps, the advertising ID is partly to blame.

To turn it off, go to Settings > Privacy & security > General. Toggle off Let apps show me personalized ads by using my advertising ID. That’s it. This doesn’t eliminate ads; it just makes them generic. Some apps may still use other methods to track you, but the advertising ID is a primary vector.

Also in the General privacy settings, you can disable:
- Let websites show me locally relevant content by accessing my language list
- Let Windows improve Start and search results by tracking app launches
- Show me suggested content in the Settings app

All these feed data to Microsoft. Switch them off to cut the flow.

App Permissions: Lock Down Camera, Mic, and Location

Modern Windows apps request permission to access your hardware and sensitive data. You can review and control each permission—camera, microphone, location, contacts, calendar, call history, email, messaging, and more. The first step is to block broad access, then allow only trusted apps.

Navigate to Settings > Privacy & security > App permissions. For each category, you’ll see a list of apps that have requested access. Toggle off any app that doesn’t need it. For example, not every app needs your location. You can also disable the master switch for each permission, but that would break functionality in apps that legitimately need it. A balanced approach: disable the master switch for sensitive permissions like camera and microphone, then manually enable only for essential apps (like Zoom for camera/mic, Maps for location).

Pay special attention to Background apps. Go to Settings > Apps > Installed apps, click the three dots next to an app, and choose Advanced options. Under Background apps permissions, set it to Never for apps you don’t want running in the background, which can save battery and prevent data collection.

Browser Privacy: Microsoft Edge is More Than a Browser

Edge is tightly integrated with Windows 11, and its privacy settings stand apart. Even if you never use Edge, some system components rely on it, so configuring it is essential.

Open Edge, go to edge://settings/privacy. You’ll find three levels of tracking prevention: Basic, Balanced, and Strict. Choose Strict to block most trackers across sites. This may break some websites, but you can add exceptions.

Scroll down to see options like:
- Send "Do Not Track" requests: Enable it (though many sites ignore it).
- Allow sites to check if you have payment methods saved: Disable unless you use autofill.
- Manage your data used in personalized advertising: Turn this off.

Edge also syncs your browsing data with your Microsoft account, which can be convenient but comes with a privacy trade-off. Under Profiles > Sync, toggle off any data you don’t want synced: history, passwords, open tabs, etc. If you’re not signed into Edge with a Microsoft account, syncing isn’t a concern, but many sign in to use Copilot or rewards.

For extra privacy, consider enabling Secure DNS in edge://settings/privacy: choose a provider like Cloudflare (1.1.1.1) to encrypt DNS queries.

Microsoft Account Syncing: The Convenience Trade-Off

Signing into Windows 11 with a Microsoft account enables syncing settings across devices—wallpaper, passwords, preferences, and more. But it also links your PC activity to your Microsoft account, potentially revealing your PC usage to cloud services.

You can control what syncs at Settings > Accounts > Windows backup. Here you can toggle off syncing for:
- OneDrive folder backup
- Remember my apps
- Remember my preferences

Also, under Settings > Accounts > Your info, you can switch from a Microsoft account to a local account, but Microsoft makes this increasingly difficult. If you value privacy over convenience, use a local account during setup (by disconnecting from the internet during OOBE) or after setup through account settings.

AI and Copilot: The New Privacy Frontier

With Windows 11 24H2, Microsoft has baked Copilot into the OS. Copilot’s AI features can access your documents, browsing history, and system context to provide smart suggestions. This raises new privacy questions.

As of now, Copilot’s privacy controls are scattered. In Settings > Privacy & security > Recall & snapshots, you can manage snapshots taken by Recall (now called “Timeline snapshots” in some builds). Recall periodically takes screenshots of your activity to create a searchable timeline. It’s a powerful feature but a privacy nightmare if left unchecked. You can disable it entirely or exclude specific apps and websites.

For Copilot in apps like Word or Excel, the enterprise versions offer more controls, but consumer versions share data with Microsoft by default. Check each app’s privacy settings.

Also, navigate to Settings > Privacy & security > Speech. Here you can disable online speech recognition, which sends your voice data to Microsoft cloud for processing. If you use voice typing or Cortana, you might want this on, but for privacy, turn it off.

Windows Search and Activity History

Windows 11 records your activity history—opened files, visited websites, and app usage—to provide a timeline feature. This data is stored locally and, if you sign in with a Microsoft account, synced to the cloud.

Go to Settings > Privacy & security > Activity history. Toggle off Store my activity history on this device and Send my activity history to Microsoft. Also, click Clear activity history to delete existing data.

For local search, Windows indexes your files. You can refine indexing at Settings > Privacy & security > Searching Windows. Choose Classic for indexing only your libraries and desktop, or Enhanced to index the entire PC. Enhanced gives faster results but means more data about your files is cached. For privacy, stick with Classic.

Location Services and Find My Device

Location tracking is used by Windows, apps, and services. Control it at Settings > Privacy & security > Location. Turn off Location services entirely if you don’t need it, or allow apps individually.

There’s also Find my device, which sends your device’s location to Microsoft so you can locate it if lost. This is useful but a privacy consideration. It’s under Settings > Privacy & security > Find my device. Turn it off if you don’t want your location sent periodically.

Other Privacy Nuggets

  • Windows Update Delivery Optimization: This allows your PC to share update files with other PCs on the internet, saving bandwidth but potentially using your upload. Go to Settings > Windows Update > Advanced options > Delivery Optimization and disable Allow downloads from other PCs. You can keep local network sharing if needed.
  • Feedback frequency: In Settings > Privacy & security > Diagnostics & feedback, set feedback frequency to Never.
  • Camera and microphone indicators: Windows 11 shows an indicator when apps use your camera or mic. While not a privacy setting per se, it alerts you to potential spying.
  • Bluetooth: Devices can track proximity. Keep Bluetooth off when not in use from the quick settings panel.
  • Windows Security SmartScreen: This checks URLs and downloads against Microsoft’s lists, potentially sending visited URLs. You can disable it at Windows Security > App & browser control > Smart App Control settings, but that reduces protection against malicious sites. Tread carefully.
  • Inking and Typing Personalization: Under Settings > Privacy & security > Inking & typing personalization, turn off the personalization toggle to stop Windows from learning your writing style.
  • Device usage data: Microsoft may use your device activity to offer “relevant experiences.” Go to Settings > Personalization > Device usage and disable all toggles for a cleaner privacy slate.

Advanced Tweaks: Registry and Group Policy

For power users, the registry offers deeper cuts. For instance, you can disable Cortana or telemetry at the group policy level. But these changes can break functionality, so back up your registry first. Third-party tools like O&O ShutUp10++ or WPD provide one-click privacy configurations, but they may overblock and cause update issues. Use them only if you know how to revert changes.

The Big Picture: A Layered Defense

Microsoft’s approach to privacy in Windows 11 reflects the company’s dual revenue streams: selling software and selling targeted ads (via Bing, Edge, and Office). There’s no single kill switch because Microsoft’s business model relies on some data flow. But you can drastically reduce your footprint by methodically disabling each vector.

Understand that some settings are buried deeper with each update, so periodically recheck your privacy settings after feature updates. Microsoft sometimes resets toggles or introduces new data collection with little fanfare.

Looking Ahead: EU Regulations May Force Change

The European Union’s Digital Markets Act and GDPR are pressuring Microsoft to give users more control. Windows 11 already includes some GDPR prompts, but true privacy-by-default is still missing. Future updates may bring a simplified privacy dashboard, but for now, it’s on the user.

In the end, mastering Windows 11 privacy isn’t about finding a single switch; it’s about understanding the ecosystem and locking down each layer. Your data is not just a product—it’s a strategic asset. Reclaim it, one setting at a time.