Windows 10 analyses various personal data. Data affected here are for instance your e-mail address and contents of e-mails received and sent out, personal interests and favourites, purchase and payment data, your personal address book, etc.
Many of these data are also transmitted to Microsoft. Most of these data transmission mechanisms however can be switched off. On the one hand, you should consider certain criteria when first installing Windows 10; on the other, various settings can still be adjusted afterwards. Our instructions are meant to assist you with selecting the correct settings and to protect your data and all your private information in the best possible way.
We have tried to draw up as universally applicable a set of instructions for private users as possible. Nevertheless, the individual configuration options and settings may differ in specific cases. These instructions refer to the options available as at 7th August 2020.
Settings during Windows 10 installation
During any Windows 10 installation, you can already make some decisions regarding data protection. You will be asked how extensive you would like the amount of diagnostic data sent back to Microsoft to be. At this point, you can only choose between «Enhanced» and «Basic». To avoid Windows sending too many data to Microsoft unintentionally, please select «Basic».
After installation, you can personalise certain settings. Wait until Windows has finished installing, and then change your settings.
Settings after Windows 10 installation
Should you already have installed Windows 10, you can subsequently adjust settings in Windows. You will find the relevant menu under Start (Windows logo) > Settings (cog) > Privacy.
General
To protect your device against definite identification based on an advertising ID allocated by Windows, switch the first option «off».
You should leave the second option «on». This way, you ensure that websites are displayed in the language set as the Windows system language where possible.
The third option serves for local improvement of Windows and be left switched «on». Windows can launch apps in frequent use by you more quickly this way.
Option | Our recommendation |
---|---|
Let apps use advertising ID to make ads more interesting to you based on your app activity (turning this off will reset your ID) | Off |
Allow websites to provide locally relevant content by accessing my language list | On |
Allow Windows to track apps launches to improve Start and search results | On |
Show me suggested content in the Settings app | Off |
Speech
Windows and the Cortana voice assistant can analyse your voice and improve personal recommendations that way. Since this allows Windows 10 to spy on your calendar, contact data and similar, you should switch this option off.
Option | Our recommendation |
---|---|
Online speech recognition | Off |
Inking & typing personalisation
Windows and the Cortana voice assistant can analyse your handwriting and improve personal recommendations that way. Since this allows Windows 10 to spy on your calendar, contact data and similar, you should switch this option off.
Option | Our recommendation |
---|---|
Getting to know you | Off |
Diagnostics & feedback
You cannot completely stop Microsoft from collecting any data. You can choose whether you would like to transmit few or plenty of data. To transmit as few data as possible, please select: «Required diagnostic data».
Option | Our recommendation |
---|---|
Diagnostic data | Required diagnostic data |
Improve inking and typing | Off |
Tailored experiences | Off |
View diagnostic data | Off |
Delete diagnostic data | Depending on your requirements |
Feedback frequency | Never |
Activity history
Windows analyses which applications you have been working with, and offers a history of your activities.
If you use a Microsoft account and have cloud synchronisation activated, this will allow you to access the same timeline on several devices. If you don’t want this, you should switch it off.
Option | Our recommendation |
---|---|
Store my activity history on this device | Off |
Send my activity history to Microsoft | Off |
Location
Location is used by your device to send the location where you are using it to Microsoft. Location detection should be switched off.
If location detection is active, organizations other than Microsoft can establish your location, too – in particular if you allow apps to access your location.
Scroll down a little bit, and by clicking on the «Delete» button any location data potentially submitted so far already can be removed from your device. Whether Microsoft will also then delete them, is not clear.
Should you have location activated anyway, you can enable or disable location detection for each of your installed apps individually as needed. Your location data will then potentially be passed on to the provider of all relevant apps you activate this for.
Option | Our recommendation |
---|---|
Allow access to location on this device | Off |
Camera
Here you can stop every app automatically given access to your camera. Switch this option off.
Should you have a camera and would like to allow access to individual apps, you should do this for each app and enable or disable access for each one individually.
Option | Our recommendation |
---|---|
Allow access to the camera on this device | Off |
Microphone
Here you can stop every app automatically given access to your microphone Switch this option off.
Should you have a microphone and would like to allow access to individual apps, you should do this for each app and enable or disable access for each one individually.
Option | Our recommendation |
---|---|
Allow access to the microphone on this device | Off |
Voice activation
You can only change this setting if you have allowed access to a microphone above. If this is the case, you can determine whether certain apps are opened and are allowed to record your spoken words.
If you don’t want to control your device by your voice, you should switch everything off here.
Option | Our recommendation |
---|---|
Allow apps to use voice activation | Off |
Notifications
You can basically enable or disable access to your notifications for all apps generally. If you don’t want to generally stop all access, you can enable or disable access for each app individually. Access should only be granted to trustworthy apps.
Motion
Since access to this is primarily used for personalised advertising, it is recommended to switch this option off.
Option | Our recommendation |
---|---|
Activate and use the accelerometer or other motion-sensing feature on your device | Off |
Account info
Since this access is primarily required for personalised advertising, it is recommended to switch this option off.
Option | Our recommendation |
---|---|
Allow access to account info on this device | Off |
Contacts
You can basically enable or disable access to your contacts for all apps generally. If you don’t want to generally stop all access, you can enable or disable access for each app individually. Access should only be granted to trustworthy apps.
Calendar
You can basically enable or disable access to your calendar for all apps generally. If you don’t want to generally stop all access, you can enable or disable access for each app individually. Access should only be granted to trustworthy apps.
Telephone calls
You can basically allow all apps access to your telephone calls or stop them from accessing them. In case you don’t want to prohibit access in general, you can allow or prohibit access for every individual app. You should only allow trustworthy apps such access.
Call history
You can basically enable or disable access to your call history for all apps generally. If you don’t want to generally stop all access, you can enable or disable access to every app individually. Access should only be granted to trustworthy apps.
You can basically enable or disable access to your e-mail by all apps generally. If you don’t want to generally stop all access, you can enable or disable access to every app individually. Access should only be granted to trustworthy apps.
Tasks
You can basically enable or disable access to your tasks by all apps generally. If you don’t want to generally stop all access, you can enable or disable access to every app individually. Access should only be granted to trustworthy apps.
Messaging
You can basically enable or disable access by all apps to your messages (SMS or MMS) generally. If you don’t want to generally stop all access, you can enable or disable access to every app individually. Access should only be granted to trustworthy apps.
Radios
You can basically enable or disable access to your radios (Bluetooth, etc.) by all apps generally. If you don’t want to generally stop all access, you can enable or disable access to every app individually. Access should only be granted to trustworthy apps.
Other devices
An automatic exchange of information, for instance inside a public Wi-Fi network, poses a serious security risk. You should therefore switch this option off.
Please note however that contactless payments using a smartphone (with Windows 10 mobile phones) are no longer possible this way.
Option | Our recommendation |
---|---|
Communicate with unpaired devices | Off |
Background apps
Microsoft terms a program a «background app» if it always remains up-to-date, even if you are not actively using it. Withdrawing this right from an app can help you save power. Particularly with mobile devices, this will make for a longer battery life. However, these settings have nothing to do with data protection. You can set this option as required by you.
App diagnostics
As per their default settings, apps also transmit many diagnostic data to Microsoft. It is recommended to switch this option «off».
Option | Our recommendation |
---|---|
Allow access to app diagnostic info on this device | Off |
Automatic file downloads
Has been deactivated as per your settings above.
Documents
You can enable or disable access to your document libraries by all apps overall. If you don’t want to generally stop all access, you can enable or disable access by every app individually. Access should only be granted to trustworthy apps.
Pictures
You can enable or disable access to your picture libraries by all apps overall. If you don’t want to generally stop all access, you can enable or disable access by every app individually. Access should only be granted to trustworthy apps.
Videos
You can enable or disable access to your video libraries by all apps overall. If you don’t want to generally stop all access, you can enable or disable access by every app individually. Access should only be granted to trustworthy apps.
File system
You can enable or disable access to all your files, including your documents, images, videos and local OneDrive files, overall. If you don’t want to generally stop all access, you can enable or disable access by every app individually. Access should only be granted to trustworthy apps.
Data protection dashboard
To guarantee the transparency of all data collected, Microsoft offers a data protection dashboard which lists all information stored. You can also delete these details as long as you are logged in via a Microsoft account.
Your data protection dashboard is available via this link: https://account.microsoft.com/privacy