Windows 11 includes a wide range of privacy controls that let you decide which apps can access your camera, microphone, location, files, and other personal information. It also provides settings for diagnostic data, personalized recommendations, search activity, cloud synchronization, and other connected features.

However, many Windows privacy guides still reference older versions of Windows 11, where settings were located in different menus or had different names.

This guide has been updated for Windows 11 26H2 and focuses on the privacy controls that are still relevant today. You don’t need to disable Windows services or make risky registry changes to significantly reduce unnecessary data sharing.

Important: Windows privacy settings don’t provide complete anonymity. They primarily give you more control over what Windows and apps can access or send. Microsoft also distinguishes between required and optional diagnostic data; turning off optional data does not mean Windows sends absolutely nothing.

1. Review App Permissions

One of the easiest ways to improve privacy is to review which apps can access sensitive hardware and personal information.

Open:

Settings → Privacy & security

Under App permissions, you’ll find controls for features such as:

• Location
• Camera
• Microphone
• Contacts
• Calendar
• Account info
• App diagnostics
• Documents
• Pictures
• Videos
• File system
• Notifications
• Other device capabilities

Microsoft notes that these controls primarily apply to Microsoft Store-style apps. Traditional desktop applications can work differently and may not appear in these permission lists.

Restrict Camera Access

Go to:

Settings → Privacy & security → Camera

If you rarely use your webcam, you can turn off:

Camera access

Alternatively, leave camera access enabled and disable individual apps that don’t need it.

For example, a video-conferencing application may legitimately need your camera, while a calculator or simple utility probably doesn’t.

Restrict Microphone Access

Go to:

Settings → Privacy & security → Microphone

Review the applications listed under the microphone permissions and disable access for apps that don’t need to record audio.

You can also turn off microphone access completely if you don’t use voice calls, voice assistants, or recording applications.

Review Location Access

Go to:

Settings → Privacy & security → Location

You can disable Location services completely or restrict location access for individual apps.

A useful approach is to leave location services enabled but only allow access to applications that actually need it, such as Maps or weather applications.

Windows privacy controls allow you to manage these permissions individually.

Review Account Information

Go to:

Settings → Privacy & security → Account info

Review which applications can access account information and disable access where it isn’t necessary.

You can perform similar reviews for:

• Contacts
• Calendar
• Documents
• Pictures
• Videos
• File system
• Notifications
• App diagnostics

The goal isn’t to disable everything. Instead, give each application only the permissions it actually needs.

2. Turn Off Optional Diagnostic Data

Windows collects diagnostic information to help Microsoft maintain, troubleshoot, update, and improve Windows.

Microsoft currently separates diagnostic information into Required diagnostic data and Optional diagnostic data. Required data cannot simply be eliminated through the normal Windows Settings interface, while Optional diagnostic data can be disabled.

Go to:

Settings → Privacy & security → Diagnostics & feedback

Under Diagnostic data, turn off:

Send optional diagnostic data

This reduces the additional diagnostic information sent to Microsoft.

You can also review the other options on this page.

Disable Inking and Typing Personalization

If you don’t want Windows using typing and handwriting information to improve Microsoft’s typing and writing services, turn off:

Improve inking and typing

Microsoft provides this control directly under Diagnostics & feedback.

Turn Off Personalized Offers

On newer Windows 11 versions, some older privacy options have been replaced by Personalized offers.

Go to:

Settings → Privacy & security → Personalized offers

Turn off:

Get personalized tips, ads, and recommendations based on my Windows activity

Depending on your build, you may instead see this option under:

Privacy & security → Recommendations & offers

Microsoft says Personalized offers can use Windows diagnostic information, account information, and information from other Microsoft products and services to personalize tips, recommendations, and advertising.

3. Disable the Windows Advertising ID

Windows can provide applications with a unique advertising ID that can be used to personalize advertising.

On current Windows 11 builds, go to:

Settings → Privacy & security → Recommendations & offers

Look for the advertising-related option and turn off the Advertising ID setting.

On some builds, the option may still appear under:

Settings → Privacy & security → General

Microsoft notes that disabling the advertising ID doesn’t eliminate advertisements. Instead, it prevents apps from using that Windows advertising identifier to provide more personalized advertising.

4. Turn Off Activity History

Activity History can store information about activities performed on your Windows device, including applications used and files opened.

Go to:

Settings → Privacy & security → Activity history

Turn off:

Store my activity history on this device

You can also use:

Clear history

to remove existing activity history stored on the PC.

Microsoft says the Windows 11 option for sending Activity History to Microsoft was deprecated in an earlier Windows 11 update, so older guides that tell you to disable a separate cloud-sync option may no longer match current Windows 11 builds.

5. Review Windows Search Privacy

Windows Search can include information from your local PC as well as connected Microsoft accounts and services.

Open:

Settings → Privacy & security → Searching Windows

Review the available search settings.

If you have particularly sensitive folders, consider excluding them from Windows Search.

Exclude a Sensitive Folder

Go to:

Settings → Privacy & security → Searching Windows

Find:

Exclude folders from enhanced search

Select:

Add an excluded folder

Choose the folder you want to exclude.

This can be useful for directories containing private documents, password-management exports, financial records, or other information you don’t want appearing in normal Windows Search results.

6. Review Cloud Content Search

Windows Search can also integrate content associated with your Microsoft account or work/school account.

Open:

Settings → Privacy & security → Search permissions

Review the Cloud content search options.

If you don’t want Windows Search displaying cloud-based content, disable the relevant account options.

This is particularly useful if your computer is shared with other people or if you don’t want cloud documents appearing alongside local search results.

7. Disable Online Speech Recognition

Online Speech Recognition sends speech information to Microsoft’s online speech-recognition services.

If you don’t use Windows voice features, you can disable it.

Go to:

Settings → Privacy & security → Speech

Turn off:

Online speech recognition

This is separate from your microphone permission. Turning off the microphone prevents apps from accessing your microphone, while disabling Online Speech Recognition controls Windows’ use of Microsoft’s online speech-recognition service.

8. Disable App Diagnostics

Windows allows certain applications to access limited diagnostic information about other running applications.

Microsoft says this information can include things such as:

• Names of running apps
• Package names
• User names associated with processes
• Memory usage
• Other process-level information

You can control this permission under:

Settings → Privacy & security → App diagnostics

Turn off:

Let apps access diagnostic info about your other apps

if you don’t need applications to access this information.

Keep in mind that traditional desktop applications aren’t controlled by these same app-diagnostic permission lists.

9. Review Camera, Microphone, and Location Permissions for Desktop Apps

This is an important detail that many privacy guides overlook.

Windows’ privacy permission pages don’t necessarily control traditional desktop applications.

A desktop program installed from an .EXE or .MSI file can access system resources differently from a Microsoft Store app. Microsoft explicitly notes that desktop applications don’t appear in some Windows privacy permission lists.

Therefore, don’t assume that an application is blocked simply because you don’t see it under:

Settings → Privacy & security → Camera

or:

Settings → Privacy & security → Microphone

For desktop applications, review the application’s own privacy settings and only install software from sources you trust.

10. Consider Using a Local Windows Account

A Microsoft account provides useful features such as cloud synchronization, Microsoft Store integration, OneDrive integration, and other connected services.

However, users who want to minimize Microsoft’s integration with their Windows profile can consider using a local account.

Go to:

Settings → Accounts → Your info

If your Windows edition and configuration support the option, look for:

Sign in with a local account instead

Follow the instructions to create or switch to a local account.

Important: A Local Account Isn’t an Anonymity Tool

Switching to a local account doesn’t automatically prevent Windows from collecting all diagnostic data.

It mainly reduces the amount of account-based cloud integration and synchronization associated with your Windows sign-in.

You should therefore combine a local account with the other privacy settings in this guide.

11. Disable Cross-Device Sharing If You Don’t Use It

Windows can provide features that allow information and application experiences to work across multiple devices.

If you don’t use cross-device functionality, review the relevant settings under:

Settings → System

and:

Settings → Apps → Advanced app settings

The exact options can vary between Windows 11 releases and installed Microsoft services, so don’t rely on older guides that refer to a single universal Shared Experiences switch.

If you don’t use Microsoft’s cross-device features, disable the individual synchronization or sharing features that you don’t need.

12. Enable DNS Over HTTPS

DNS requests can reveal which domains your device is attempting to access. DNS over HTTPS (DoH) encrypts DNS queries between your computer and a compatible DNS resolver.

Windows 11 supports encrypted DNS configuration.

Go to:

Settings → Network & internet

Select your active:

• Wi-Fi connection, or
• Ethernet connection

Open the connection’s DNS settings and select:

Edit DNS

Change the configuration to:

Manual

Enable IPv4, then enter a DNS provider that supports DNS over HTTPS.

For example, you can use a provider such as Google’s public DNS:

Preferred DNS: 1.1.1.1

Alternate DNS: 1.0.0.1

Then select the available DNS over HTTPS option.

DNS Over HTTPS Isn’t a VPN

DoH protects DNS queries, but it does not encrypt all of your internet traffic.

Your ISP, VPN provider, websites, and other network participants can still observe different parts of your connection depending on the circumstances.

Use DoH as one layer of privacy rather than treating it as a replacement for a VPN.

13. Reduce Personalization in the Start Menu and Windows

Windows 11 can personalize parts of the Start menu and search experience based on how you use your PC.

Microsoft’s current Recommendations & offers settings include controls for things such as personalized tips, suggested content, and app-launch tracking.

Go to:

Settings → Privacy & security → Recommendations & offers

Review options such as:

• Personalized tips, ads, and recommendations
• Suggested content in Settings
• Start and search personalization
• App-launch tracking
• Website access to your language list

Turn off anything you don’t want Windows using for personalization.

The exact wording may change between Windows 11 builds.

14. Review Microsoft Account Data

Changing Windows settings doesn’t necessarily remove information that has already been associated with your Microsoft account.

You can review available account data through Microsoft’s Privacy Dashboard:

Microsoft Privacy Dashboard

Depending on the Microsoft services you use, the dashboard can provide controls for activity and other account-related information.

Review the available categories and delete information you no longer want retained where Microsoft provides a deletion option.

This is especially useful if you’ve used the same Microsoft account across Windows, Edge, Bing, Microsoft 365, Xbox, or other Microsoft services.

15. Disable Clipboard Synchronization

Windows Clipboard history can synchronize copied content across devices when synchronization is enabled.

If you don’t need this functionality, open:

Settings → System → Clipboard

Review:

Sync across your devices

and turn it off if you don’t want clipboard data synchronized between devices.

This is particularly worth checking if you frequently copy:

• Passwords
• Authentication codes
• API keys
• Private messages
• Addresses
• Financial information

You should also avoid leaving sensitive information in Clipboard history longer than necessary.

16. Review OneDrive Synchronization

OneDrive isn’t inherently a privacy problem, but anything synchronized to a cloud service is no longer stored exclusively on your local PC.

If you don’t use OneDrive, you can stop synchronization or unlink the PC.

Click the OneDrive icon in the Windows notification area and open:

Settings → Account

From there, you can manage the account and synchronization settings, including the option to unlink the PC where available.

Before doing this, make sure you understand where your files are stored.

If OneDrive’s Files On-Demand feature is being used, some files may exist primarily in the cloud rather than as complete local copies.

Don’t delete the OneDrive folder simply because you want to stop synchronization.

17. Use a VPN for Network Privacy

A VPN can provide another layer of privacy by creating an encrypted connection between your device and the VPN provider.

A VPN can also hide your public IP address from websites you visit and from other parties on the local network.

However, a VPN does not make you anonymous.

Your VPN provider can potentially see metadata about your connection, so provider selection matters.

When choosing a VPN, look for:

• A clearly documented privacy policy
• Independent security audits
• Modern encryption protocols
• A transparent ownership structure
• A reputable track record
• Clear information about logging practices

Also remember that a VPN doesn’t prevent websites from identifying you through cookies, browser fingerprinting, account logins, or other tracking technologies.

Optional: Use a Privacy Tool for Advanced Settings

If you want to manage many Windows privacy settings from one interface, O&O ShutUp10++ is one option worth considering.

It is designed specifically for Windows privacy controls and provides explanations and recommendations for its settings.

Before applying aggressive changes, create a restore point and review each recommendation rather than simply enabling every available restriction.

For advanced users, centralized privacy tools can be convenient, but Windows’ built-in settings should remain your first choice because they’re easier to understand and less likely to interfere with Windows features.

Should You Disable Windows Services to Stop Telemetry?

You may find older privacy guides recommending commands such as:

sc config DiagTrack start= disabled

or instructions telling you to disable multiple Windows services.

I don’t recommend making this the default approach on Windows 11 26H2.

Microsoft’s current diagnostic architecture and policies are more complicated than simply switching off one service. Aggressively disabling system components can also interfere with Windows Update, troubleshooting, security features, or other Windows functionality.

Likewise, avoid blindly disabling:

• Windows Update
• Microsoft Defender
• Windows Security
• Windows Error Reporting
• Core networking services
• System services required by Windows features

A better privacy strategy is to use Microsoft’s documented privacy controls first.

Does Disabling Telemetry Improve Windows 11 Performance?

Usually, don’t expect a dramatic performance improvement.

Reducing optional diagnostic data or personalization can reduce some background activity, but on a modern PC the performance difference is generally small.

Privacy settings should therefore be changed primarily because you want more control over your data—not because you expect a large FPS increase or a major reduction in RAM or CPU usage.

If your objective is performance, Windows 11 has more relevant optimizations involving startup applications, background processes, power settings, storage, drivers, and graphics configuration.

Windows 11 26H2 Privacy Checklist

For a practical privacy-focused configuration, review these settings:

• Disable Optional Diagnostic Data
• Disable Improve inking and typing if unused
• Turn off Personalized Offers
• Disable the Advertising ID
• Review Activity History
• Review Camera permissions
• Review Microphone permissions
• Review Location permissions
• Review Contacts and Calendar permissions
• Review App Diagnostics
• Review Cloud Content Search
• Disable Online Speech Recognition if unused
• Review Start and Search personalization
• Disable unnecessary Clipboard synchronization
• Review OneDrive synchronization
• Review Microsoft account data
• Consider encrypted DNS
• Consider a VPN for network privacy
• Create a restore point before making advanced system changes

Frequently Asked Questions

Does Windows 11 collect telemetry?

Yes. Windows 11 collects diagnostic data, which Microsoft categorizes as Required or Optional. Microsoft says Required diagnostic data is used for purposes such as keeping Windows secure, updated, reliable, and compatible, while Optional diagnostic data provides additional information for troubleshooting and product improvement.

Read: How to Disable Telemetry and Improve Privacy in Windows 11 26H2 – Tech2Geek

Can I completely disable Windows 11 telemetry?

The normal Windows privacy settings allow you to disable Optional diagnostic data, but they do not provide a simple switch that eliminates every form of diagnostic or service-related communication.

Microsoft states that Required diagnostic data is necessary for Windows to operate and remain secure and updated.

Is a local account more private than a Microsoft account?

A local account reduces some Microsoft account-based synchronization and cloud integration, but it doesn’t automatically disable Windows diagnostics or other online services.

For better privacy, combine account choices with Windows’ privacy controls.

Does disabling the Advertising ID stop advertisements?

No. It prevents applications from using the Windows advertising identifier for certain forms of personalized advertising. Microsoft explicitly notes that disabling the Advertising ID does not reduce the number of advertisements you see.

Does a VPN make me anonymous?

No. A VPN can hide your IP address from websites and encrypt traffic between your device and the VPN provider, but it doesn’t prevent tracking through accounts, cookies, browser fingerprinting, or other techniques.

Should I use a Windows privacy tool?

Tools such as O&O ShutUp10++ can make it easier to manage large numbers of privacy settings, but they should be used carefully. For most users, Microsoft’s built-in Windows privacy settings are the safest starting point.

Final Thoughts

Windows 11 26H2 gives you considerably more control over privacy than simply turning a single “telemetry” switch on or off.

The most useful approach is to review your permissions, disable Optional diagnostic data, turn off unnecessary personalization, limit cloud synchronization, review Microsoft account activity, and restrict applications that don’t need access to sensitive information.

You don’t need to break Windows services or apply dozens of questionable registry tweaks to improve your privacy.

Start with the built-in controls, make changes according to how you actually use your PC, and revisit the settings after major Windows updates because Microsoft occasionally changes their names and locations.