Windows Privacy

Telemetry – what does Windows actually collect?

Since Windows 10, Microsoft has systematically collected usage data via telemetry. What exactly? That depends on the level set in the settings.

Telemetry Levels

• Security (Enterprise only) — minimal, only security-relevant data
• Required (Standard) — device info, software inventory, performance data, crash reports
• Optional — additionally: browsing behavior, input, app usage in detailed form

What specifically is being sent?

• Hardware inventory — model, CPU, RAM, GPU
• Software inventory — installed programs
• Usage statistics — which apps, how often, how long
• Crash reports — stack traces, memory dumps
• Settings — language, time zone, screen resolution
• Advertising ID — unique ID that links your activities across apps
• Voice input — if Cortana / voice input is active
• Inking & Typing — keyboard input patterns for "better suggestions"

Disable Telemetry and Tracking

Windows has built-in privacy settings. Most people don't know them or simply click through them during installation. Here are the most important levers:

In Windows Settings (manual)

1. Reduce Telemetry Level Settings → Privacy & security → Diagnostics & feedback → Set diagnostic data to "Required". Turn off optional data.
2. Disable Advertising ID Settings → Privacy & security → General → Turn off "Let apps use advertising ID".
3. Stop Activity History Settings → Privacy & security → Activity history → Disable "Store my activity history on this device".
4. Speech Recognition & Inking Settings → Privacy & security → Speech recognition / Personalized inking → Turn off if not used.
5. Check Location Service Settings → Privacy & security → Location → Disable completely or decide per app.
6. Completely Disable Cortana If not used: End via Task Manager, disable in settings.

Hidden Feature: Group Policies

Windows Pro/Enterprise have the Group Policy Editor (gpedit.msc), which goes much deeper. There, dozens of telemetry aspects can be switched off that are hidden in the normal settings. But beware: incorrect changes can damage Windows functions.

Browser Privacy

Most tracking happens in the browser — and not primarily by Microsoft, but by websites and advertising networks. Cookies, fingerprinting, pixel trackers, heatmap tools – a jumble.

Browser Choice

• Firefox — privacy-friendly configurable, from Mozilla (non-profit)
• Brave — Chromium-based, blocks trackers very aggressively by default
• Edge — Microsoft's browser, integrated with Windows, but collects data itself
• Chrome — convenient, but Google collects data; unfavorable from a privacy perspective
• Tor Browser — maximally anonymous, but slow; only for special purposes

Important Browser Settings

• Block third-party cookies — prevents cross-site tracking
• Activate Tracker Protection — "Strict" for Firefox, "Strict" for Edge
• HTTPS-only mode — enforce encrypted connections
• Delete data on close — do not keep cookies and cache permanently
• Send "Do Not Track" header — often ignored, but costs nothing

Important Browser Extensions

• uBlock Origin — the best ad/tracker blocker, free
• Privacy Badger — from the EFF, complements uBlock
• HTTPS Everywhere — enforces encrypted connections (already built into Firefox/Brave)
• Decentraleyes — prevents tracking by CDNs (Google Fonts & Co.)

Discipline App Permissions

Apps from the Microsoft Store no longer ask for permission upon installation – they have already accessed something before you can say anything. Restricting app permissions is therefore an important task.

What Apps Want

• Location — even when not necessary (e.g., a note-taking app does not need GPS access)
• Microphone & Camera — sensitive, should only be in apps that really need it
• Contacts & Calendar — OK for Office apps, otherwise probably not
• Libraries (pictures, documents, videos) — only if the app works with them
• Background activity — many apps want to run constantly
• Account access — some want to see your entire Microsoft identity

What You Should Check

1. Review app permissions Settings → Privacy & security → App permissions. See what each app is allowed to do, by category (camera, microphone, location, etc.).
2. Restrict background apps Settings → Apps → Installed apps → check "Power/Background" for each app.
3. Disable device usage by apps If not needed: Enable or disable Bluetooth, radio, and other devices for individual apps.
4. Use the microphone LED Windows 11 shows in the taskbar when apps are using the microphone — you'll often only notice trackers this way.

Encrypt local data

What happens if your laptop is stolen? If someone briefly accesses your unlocked PC? If you sell the hard drive and "only" deleted it? Encryption is the last line of defense.

BitLocker — Windows' built-in encryption

• Available for Windows Pro/Enterprise/Education at no extra cost
• For Windows Home, only limited ("device encryption")
• Encrypts the entire system hard drive — data is inaccessible in case of theft
• Keep recovery key safe — otherwise, your own data will be lost in an emergency

Activate BitLocker

1. Settings → Privacy & security → Device encryption (or Control Panel → BitLocker)
2. Select Activate
3. Secure the recovery key (NOT online with Microsoft, but on a USB stick in a safe)
4. Encryption runs in the background — can take hours

VeraCrypt — the open-source alternative

For maximum control and non-Microsoft trust: VeraCrypt encrypts individual containers (files that function like virtual hard drives). Open source, free, very secure. More complicated to use than BitLocker, but much more flexible.