Windows 8.1 and Windows Server 2012 R2 privacy statement for installation features
Microsoft is committed to protecting your privacy. This privacy statement explains the data collection and use practices of some privacy-impacting features you can make decisions about while installing and setting up Windows 8.1 or Windows Server 2012 R2 (“Windows”). The full Windows 8.1 and Windows Server 2012 R2 privacy statement is available online at:
http://go.microsoft.com/fwlink/?LinkId=280262
Features you can make decisions about while installing Windows 8.1 or Windows Server 2012 R2 include Dynamic Update and the Installation Improvement Program. Activation happens automatically while you set up Windows 8.1 or Windows Server 2012 R2. Features you can make decisions about while setting up Windows after installation include device installation, Internet Explorer Do Not Track , Internet Explorer compatibility lists, Internet Explorer Flip Ahead with Page Prediction, Internet Explorer SmartScreen Filter, location services, Microsoft account, syncing your settings, Microsoft Active Protection Service, name and account picture, update services, URLs for web content that apps use, Windows Customer Experience Improvement Program, Windows Store automatic app updates, Windows Error Reporting, Windows Help Experience Improvement Program, Windows Search, and Windows SmartScreen. With your consent, these features may send information over the Internet when you're installing and setting up Windows, or later as you use Windows.
Collection and use of your information
The personal information we collect from you during installation and setup will be used by Microsoft and its controlled subsidiaries and affiliates to set up the features you use and provide the services or carry out the transactions you have requested or authorized. The information may also be used to analyze and improve Microsoft products and services.
Except as described in this statement, personal information you provide won’t be transferred to third parties without your consent. We occasionally hire other companies to provide limited services on our behalf, such as performing statistical analysis. We will only provide those companies the personal information they need to deliver the service. They are prohibited from using that information for any other purpose.
Microsoft may access or disclose information about you, including the content of your communications, in order to: (a) comply with the law or respond to lawful requests or legal process; (b) protect the rights or property of Microsoft or our customers, including the enforcement of our agreements or policies governing your use of the software; or (c) act on a good faith belief that such access or disclosure is necessary to protect the personal safety of Microsoft employees, customers, or the public.
Information collected by or sent to Microsoft by Windows could be stored and processed in the United States or any other country in which Microsoft or its affiliates, subsidiaries, or service providers maintain facilities. Microsoft abides by the safe harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union, the European Economic Area, and Switzerland.
Collection and use of information about your PC
When you use software with Internet-enabled features, information about your PC ("standard computer information") is sent to the websites you visit and online services you use. Standard computer information typically includes information such as your IP address, operating system version, browser version, and region and language settings. In some cases, it may also include a hardware ID, which indicates the device manufacturer, device name, and version. If a particular feature or service sends information to Microsoft, standard computer information will be sent as well.
The privacy details for each Windows installation feature, software, or service in the supplemental privacy information listed below describe what additional information is collected and how it’s used.
Security of your information
Microsoft is committed to helping protect the security of your information. We use a variety of security technologies and procedures to help protect your information from unauthorized access, use, or disclosure. For example, we store the information you provide on computer systems with limited access, which are located in controlled facilities. When we transmit highly confidential information (such as a credit card number or password) over the Internet, we protect it through the use of encryption, such as the Secure Socket Layer (SSL) protocol.
For more information
Microsoft welcomes your comments regarding this privacy statement. If you have questions about this privacy statement, or believe that we have not adhered to it, please contact us by submitting your questions online to Privacy Feedback at:
http://go.microsoft.com/fwlink/?LinkId=227290
Or by mail at:
Windows 8.1 and Windows Server 2012 R2 privacy statement for installation features
c/o Microsoft Privacy
Microsoft Corporation
One Microsoft Way
Redmond, Washington 98052 USA
Installing Windows
Dynamic Update
What this feature does
Dynamic Update makes it possible for Windows to perform a one-time check with Windows Update to get the latest updates for your PC while Windows is being installed. If updates are found, Dynamic Update automatically downloads and installs them so your PC is up to date the first time that you sign in or use it. 
Information collected, processed, or transmitted
To install compatible drivers, Dynamic Update sends info to Microsoft about your PC's hardware. The types of updates Dynamic Update can download to your PC include: 
•	Installation updates. Important software updates for installation files to help ensure a successful installation.
•	In-box driver updates. Important driver updates for the version of Windows that you’re installing. 
Additionally, if you install Windows from the Windows Store, Dynamic Update will download and install the latest updates to Windows, as well as certain hardware drivers your PC needs.
Use of information
Dynamic Update reports information to Microsoft about your PC's hardware to help identify the correct drivers for your system. For more info about how information collected by Dynamic Update is used, see the Update Services section of this document.
Choice and control
If you install Windows from the Windows Store, Setup downloads and installs updates automatically. If you install Windows from physical media, you’ll be asked whether you would like to go online to install updates. 
Installation Improvement Program
What this feature does
This feature sends a single report to Microsoft containing basic info about your PC and how you installed Windows. Microsoft uses this info to help improve the installation experience and to create solutions to common installation problems. 

Information collected, processed, or transmitted
The report generally includes information about your installation experience, such as the date of installation, the time it took for each installation phase to complete, whether the installation was an upgrade or a new installation of the product, version details, operating system language, media type, PC configuration, and success or failure status, along with any error codes. 
If you choose to participate in the Installation Improvement Program, the report is sent to Microsoft when you’re connected to the Internet. The Installation Improvement Program randomly generates a number called a globally unique identifier (GUID) that is sent to Microsoft with the report. The GUID lets us determine which data is sent from a particular PC over time. The GUID doesn’t contain any personal info and isn’t used to identify you.
Use of information
Microsoft and our partners use the report to help improve our products and services. We use the GUID to correlate this data with data collected through the Windows Customer Experience Improvement Program (CEIP), a program you can choose to participate in when you’re using Windows. 
Choice and control
You can choose to participate in this program when you install Windows by selecting I want to help make the Windows installation better. 
For more info, see the Windows CEIP section.
Setting up Windows
Activation
What this feature does
Activation reduces software counterfeiting, which helps ensure that Microsoft customers receive the software quality they expect. Once your software is activated, a specific product key becomes associated with the PC (or the hardware) on which your software is installed. This association prevents the product key from being used to activate the same copy of the software on multiple PCs. Some changes to your PC hardware or software might require you to reactivate Windows. Activation can detect and disable activation exploits (software that circumvents or bypasses Microsoft software activation). If an activation exploit is present, a software or hardware vendor might have tampered with genuine Microsoft software in order to create counterfeit copies of the software. Activation exploits may interfere with the normal operation of your system.
Information collected, processed, or transmitted
During activation, the following info is sent to Microsoft:
•	The Microsoft product code (a five-digit code that identifies the Windows product you’re activating).
•	A channel ID or site code that identifies how the Windows product was originally obtained. For example, a channel ID or site code identifies whether the product was originally purchased from a retail store, obtained as an evaluation copy, obtained through a volume licensing program, or pre-installed by a PC manufacturer.
•	The date of installation, and whether the installation was successful.
•	Information that helps confirm that your Windows product key hasn’t been altered.
•	PC make and model.
•	Version information for the operating system and software.
•	Region and language settings.
•	A unique number called a Globally Unique Identifier (GUID) assigned to your PC. 
•	Product Key (hashed) and Product ID.
•	BIOS name, revision number, and revision date.
•	Hard drive volume serial number (hashed).
•	The result of the activation check. This includes error codes and information about any activation exploits and related malicious or unauthorized software found or disabled:
•	The activation exploit’s identifier.
•	The activation exploit's current state, such as cleaned or quarantined.
•	PC manufacturer’s identification.
•	The activation exploit’s file name and hash, as well as a hash of related software components that may indicate the presence of an activation exploit.
•	The name and a hash of the contents of your PC’s start-up instructions file. If your Windows license is on a subscription basis, information will also be sent about how your subscription works. Standard computer information is sent as well.
•	If you’re using a volume-licensed copy of Windows that uses an activation server, the IP address of that server may be sent to Microsoft.
Use of information
Microsoft uses the information to confirm that you have a licensed copy of the software. Microsoft doesn’t use the information to contact individual consumers. License server information is used to ensure that license servers comply with their license agreements.
Choice and control
Activation is required and occurs automatically while you set up Windows. If you don’t have a valid license for the software, you won’t be able to activate Windows.
Device installation
What this feature does
When a new device is installed on your PC, Windows can automatically search for, download, and install the device’s driver software. Windows can also download information about the device, such as a description, picture, and manufacturer logo. Some devices, including certain printers, webcams, mobile broadband devices, and portable devices that sync with Windows, have an app to fully enable the device’s functionality and user experience. If the device’s manufacturer has provided an app for the device, Windows can automatically download and install that app from the Windows Store if you’re signed in to the Store.
Information collected, processed, or transmitted
When Windows searches for drivers, it will contact the Windows Update service online to find and download device drivers, if an appropriate driver is not already available on your PC. For more about the information collected by Windows Update and how it’s used, see the Update Services privacy statement at:
http://go.microsoft.com/fwlink/?linkid=50142.
To retrieve information about your device and determine whether an app is available for it, Windows sends data about the device to Microsoft, including its Device ID (for example, Hardware ID or Model ID of the device you are using), your region and language, and the date that the device information was last updated. If a device app is available, Windows automatically downloads and installs it from the Windows Store. The app will be available in your Windows Store account in the list of apps you own.
Use of information
The information sent to Microsoft is used to help determine and download the appropriate device driver, information, and app for your device. Microsoft doesn’t use the information sent to identify or contact you.
Choice and control
If you choose express settings while setting up Windows, you turn on automatic downloading and installation of device drivers, device information, and device apps. If you choose to customize settings, you can control automatic downloading and installation of device drivers, apps, and info by selecting Automatically get device drivers, apps, and info for new devices under Help protect and update your PC. After setting up Windows, you can change these settings in Control Panel by selecting Change device installation settings, and then selecting No, let me choose what to do.
You can uninstall a device app at any time without uninstalling the device, though you might need the app to use certain features of the device. You can reinstall a device app after you’ve uninstalled it by going to the list of apps you own in the Windows Store.
Device encryption
What this feature does
Device encryption helps protect your data by encrypting it using BitLocker Drive Encryption technology, which can help prevent offline software attacks. When you turn on device encryption, Windows encrypts the data on the drive Windows is installed on.
Information collected, processed, or transmitted
When you use software encryption, cryptographic keys in memory continually encrypt and decrypt data as it is read from or written to the protected drive. When you use hardware encryption, data encryption and decryption is performed by the drive.
Windows uses the Trusted Platform Module (TPM) in your PC to store and manage the cryptographic keys used to encrypt your drive. When device encryption is on, Windows automatically encrypts the drive Windows is installed on and generates a recovery key. The recovery key can help you to access your protected data in case of certain hardware failures or other problems.
The BitLocker recovery key for your PC is automatically backed up online in the Microsoft SkyDrive account of each administrator account that is connected to a Microsoft account. Your computer name and an identifier for the recovery key are also backed up in the same SkyDrive account. To help protect your privacy, the information is sent encrypted via SSL. 
Use of information
Cryptographic keys and globally unique identifiers (GUIDs) are stored in memory on your PC to support BitLocker operations. Recovery information allows you to access your protected data in case of certain hardware failures or other problems, and allows BitLocker to distinguish between authorized and unauthorized users.
Microsoft backs up your recovery information in your SkyDrive account so you can access it online. We don’t use the recovery key information or store it anywhere other than that SkyDrive account. We might use aggregate data about recovery keys to analyze trends and help improve our products and services. For example, we might use this information to determine the proportion of PCs where Device Encryption is turned on.
Choice and control
If you choose to use a Microsoft account while setting up your PC, and your PC supports it, device encryption is turned on and your recovery key is backed up in your SkyDrive account. If you choose to use a local account while setting up your PC, device encryption is turned off.
If you later connect a Microsoft account to an administrator account on your PC:
•	If device encryption isn’t already turned on, Windows turns it on automatically, and backs up the recovery info to that user’s SkyDrive account.
•	If device encryption is already turned on, the recovery information for your PC is backed up to that user’s SkyDrive account.
You can view and manage the recovery keys stored in your SkyDrive account at http://skydrive.com/recoverykey.
SkyDrive cloud storage
What this feature does
When you sign in with a Microsoft account on your device, you can choose to automatically save certain content and settings to Microsoft servers so you’ll have a backup if something happens to your device.
Information collected, processed, stored, or transmitted
During setup, if you choose to use SkyDrive for cloud storage, Windows will automatically send content to Microsoft servers, including:
•	Photos and videos on your device that are saved to the camera roll folder.
•	Settings that are specific to your device and not shared between your devices.
•	Descriptive info about your device, like the device name and type.
You may also choose to save additional content such as personal files on Microsoft servers, and apps may choose to select Microsoft servers as the default save location for your files.
Use of information
Windows uses this content to provide the cloud storage service. Microsoft doesn't use your content or information to identify, contact, or target advertising to you.
Choice and control
If you choose to use the default SkyDrive settings while setting up your PC, Windows will save the content described in this section to SkyDrive. You can change these settings at any time in the SkyDrive section of PC settings. 

Internet Explorer compatibility list updates
What this feature does
In order to improve your browsing experience, Microsoft provides compatibility lists, which adjust the behavior of Internet Explorer to adapt to changing websites and PC hardware.
The compatibility lists include:
•	Lists of websites that were designed for older or other browsers, which allow Internet Explorer to automatically adjust how it renders these websites or how it communicates with those websites in order to improve compatibility and provide for a better user experience on those sites. 
•	Lists of hardware devices, particularly graphics hardware, that have known compatibility problems, so that Internet Explorer can avoid using these devices when rendering web content. 
•	Lists of websites that use Adobe Flash Player in ways that are known to be compatible with Internet Explorer, so that Flash Player can be used for those websites.
•	Lists of popular web addresses that Internet Explorer provides as suggestions when the user is typing in the address bar.
•	Lists of websites that support the Flip Ahead feature, used to determine when best to enable that feature. 
For better website compatibility, you can turn on Compatibility List Updates. If you choose to turn this on, Internet Explorer will periodically download an updated set of compatibility lists from Microsoft.
Information collected, processed, or transmitted
If you turn on compatibility list updates, Internet Explorer will periodically download an updated set of compatibility lists from Microsoft. These lists include lists of websites and PC hardware as described above. 
Use of information
Internet Explorer uses updated compatibility lists, along with your stored Compatibility settings, to help determine optimal compatibility settings for websites, graphics hardware, and features.
Choice and control
If you choose express settings while setting up Windows, you turn on Compatibility List Updates. If you choose to customize settings, you can control Compatibility List Updates by selecting Download compatibility lists for Internet Explorer to help improve my experience on some sites under Check online for solutions. After setting up Windows, you can change this setting in the Compatibility View settings dialog in Internet Explorer.
For more info about the Internet Explorer features affected by compatibility lists, read the Internet Explorer privacy statement at:
http://go.microsoft.com/fwlink/?LinkId=239590

Internet Explorer Flip Ahead with Page Prediction
What this feature does
Flip Ahead with Page Prediction tries to determine what pages you're likely to go to next and will proactively load those pages in the background, allowing you to have a faster browsing experience. 
Information collected, processed, or transmitted
When this feature is turned on, information about webpages you visit is sent to Microsoft, together with standard computer information. This includes the addresses of the webpages you visit as well as info about images and videos included on the page. 
Info associated with the web address, such as search terms or data you entered in forms, might be included. For example, if you visited the Microsoft.com search website at http://search.microsoft.com and entered "Email" as the search term, the full address http://search.microsoft.com/results.aspx?q=Email&qsc0=0&FORM=QBMH1&mkt=en-US will be sent. Address strings might unintentionally contain personal info. 
Statistics about the webpages you visit will also be sent to Microsoft, such as the time that you visited webpages, which webpage referred you, and how you got there (for example, by clicking a link or one of you Favorites). A unique identifier generated by Internet Explorer is also sent. The unique identifier is a randomly generated number that doesn't contain any personal information and isn't used to identify you. If you delete your browsing history or if you turn Flip Ahead off and back on again, a new unique identifier will be created. We don't correlate old unique identifiers with new ones. 
Other information that will help Microsoft improve the experience of features in Internet Explorer will also be sent including the time it took to load a page in Internet Explorer and standard machine information like your network connection type, device model info and whether you have touch-enabled hardware. Internet Explorer will periodically download updates to the list of websites that support Flip Ahead with Page Prediction.
To help protect your privacy, the information is encrypted when sent to Microsoft. In addition, Microsoft filters address strings to try to remove personal information.
Use of information
Microsoft uses the information sent by Flip Ahead with Page Prediction to improve the feature and to generate better predictions. This information may also be used to improve the quality of other Microsoft products and services.  
This information isn't used to identify, contact, or target advertising to you.
Choice and control
If you choose express settings while setting up Windows, you turn on Flip Ahead with Page Prediction. If you choose to customize settings, you can turn this feature off under Share info with Microsoft and other services. After setting up Windows, you can change this setting in Internet Explorer settings.

For more info about this feature and your privacy, read the Internet Explorer privacy statement online at:
http://go.microsoft.com/fwlink/?LinkId=239590
Internet Explorer Do Not Track
What this feature does
When you visit a website in any browser, you automatically share information with that website, such as cookies, your IP address, and other standard computer information. If the website contains content provided by a third-party website (for example, a map, advertisement, or web measurement tools such as a web beacon or scripts), some information about you may be sent automatically to the content provider. This has several benefits: for example, you can access third-party content conveniently, and the presence of advertising on a website you are visiting may let the website provide access to premium content at no charge. There can, however, be an impact to your privacy as a result, because it is possible for the content providers to track you across multiple websites. If you choose to turn on the Do Not Track feature in Internet Explorer, Internet Explorer will send a Do Not Track request to the websites you visit and to the third parties whose content is hosted on those sites. This feature only works in Internet Explorer—it does not impact any Do Not Track settings in other browsers.
Information collected, processed, or transmitted
If you choose to turn on the Do Not Track feature, each time you visit a website, Internet Explorer will send a Do Not Track request to both the website and the third party servers whose content is hosted on the website. How the websites you visit choose to respond to or interpret the Do Not Track request is subject to their privacy practices. No information is sent to Microsoft.
Regardless of whether you choose to turn on the Do Not Track feature, Internet Explorer will always send Do Not Track requests to the websites you visit while using InPrivate Browsing. Additionally, if you’re using a Tracking Protection List or Personalized Tracking Protection, Internet Explorer will always send Do Not Track requests.
Use of information
Internet Explorer sends Do Not Track requests as described in the previous section. How the websites you visit choose to respond to or interpret Do Not Track requests is subject to the websites’ privacy practices. 
Choice and control
If you choose express settings while setting up Windows, you turn on the Do Not Track feature. If you choose to customize settings, you can control Do Not Track by selecting Send a Do Not Track request to websites I visit in Internet Explorer under Help protect your PC and your privacy and. After setting up Windows, you can change this setting in Internet Explorer by selecting the Advanced tab in Internet options, and then under Security, clear the Always send Do Not Track header check box 
Internet Explorer SmartScreen Filter 
What this feature does
Internet Explorer SmartScreen Filter is designed to help warn you about unsafe websites that are impersonating trusted websites (phishing) or contain threats to your PC. If you opt in to SmartScreen Filter, it first checks the URL of the webpage you’re visiting against a list of high-traffic webpage URLs stored on your PC that are believed by Microsoft to be legitimate. URLs that aren’t on the local list and the URLs of files you’re downloading will be sent to Microsoft and checked against a frequently updated list of webpages and downloads that have been reported to Microsoft as unsafe or suspicious. You may also choose to use SmartScreen Filter manually to verify individual websites with Microsoft. Additionally, if you download or run an app from the Internet, SmartScreen will check the app against a list of commonly downloaded and known unsafe apps to help protect you from running unsafe apps.
Information collected, processed, or transmitted
When you use SmartScreen Filter to check websites automatically or manually, the URL of the website you’re visiting will be sent to Microsoft, together with standard computer information. 

Info that might be associated with the URL, such as search terms or data you entered in forms might be included. For example, if you visited the Microsoft.com search website at http://search.microsoft.com and entered "Email" as the search term, the full URL http://search.microsoft.com/results.aspx?q=Email&qsc0=0&FORM=QBMH1&mkt=en-US will be sent. URL strings might unintentionally contain personal information.
When you use Internet Explorer to download a program, SmartScreen Filter will send the information above, along with information about the downloaded program, such as a file identifier (a “hash”), results from installed antimalware tools, and the program’s digital certificate information, if available. 
Periodically, information about your usage of SmartScreen Filter will also be sent to Microsoft, such as the time and total number of websites browsed since an URL was sent to Microsoft for analysis. Some information about files that you download from the web, such as file name, may also be sent to Microsoft. Some website URLs that are sent to Microsoft may be stored along with additional information, including web browser version, operating system version, SmartScreen Filter version, the browser language, the referring webpage, and information about whether Compatibility View was enabled for the website. A unique identifier generated by Internet Explorer is also sent. The unique identifier is a randomly generated number that doesn’t contain any personal information and isn’t used to identify you.
To help protect your privacy, the information is encrypted when sent to Microsoft. In addition, Microsoft filters address strings to try to remove personal information.
Use of information
Microsoft uses the information sent by SmartScreen Filter to identify potentially malicious URLs and files, and to analyze performance and improve the quality of our products and services.
This information isn't used to identify, contact, or target advertising to you.
Choice and control	
If you choose express settings while setting up Windows, you turn on SmartScreen Filter. If you choose to customize settings, you can control SmartScreen Filter by selecting Use SmartScreen online services to help protect against malicious content in sites loaded by Windows Store apps and Internet Explorer, and malicious downloads under Help protect your PC and your privacy. After setting up Windows, you can change this setting in the Safety menu in Internet Explorer.
For more info about SmartScreen Filter and your privacy, read the Internet Explorer privacy statement online at:
http://go.microsoft.com/fwlink/?LinkId=239590
Location services
Windows location services let you decide which apps, websites, and Windows features you want to allow to determine your PC’s location. Windows location services consist of two components. Windows Location Provider connects to a Microsoft online service to determine your location. Windows Location Platform determines your PC’s location using hardware, such as a GPS sensor, or software, such as Windows Location Provider.
Windows Location Platform
What this feature does
If you choose to turn on the Windows Location Platform, apps you install from the Windows Store, as well as some Windows features, can ask for permission to determine your PC’s location. If you let an app use your location, in addition to providing your location while you use the app, Windows Location Platform can tell the app when your PC moves inside or outside of app-defined geographical boundaries. For example, an app could let you set a reminder to pick up groceries when you leave work. Depending on your system’s configuration, the Windows Location Platform may determine your PC’s location using hardware, such as a GPS sensor, or software, such as Windows Location Provider.
Windows Location Platform doesn’t prevent apps from determining your PC’s location in other ways. For example, you can install devices (such as a GPS receiver) that might send location information directly to an app and bypass the platform. Regardless of your Windows Location Platform settings, online services can use your IP address to determine its approximate location—usually the city your PC is in.
Information collected, processed, or transmitted
The Windows Location Platform itself doesn’t transmit any information from your PC, but individual location providers (such as the Windows Location Provider) might transfer information when Windows Location Platform asks them to determine your PC’s location. Apps, websites, and features that are authorized to use the platform to determine your PC’s location could also transmit or store that information. If an app sets up geographical boundaries to monitor, those boundaries are stored encrypted on your PC. The information stored about these boundaries includes a name, a location, and whether your PC was inside or outside the boundary the last time its location was determined. Apps that set up geographical boundaries might transmit or store this information. 
Use of information
If you turn on the Windows Location Platform, authorized apps, websites, and Windows features will be able to access your PC’s location and use it to give you personalized content. If you use a third-party app or location provider, its use of your PC’s location is subject to the third party’s privacy practices. Before you download a Windows Store app, you’ll be able to see whether the app is location-aware in the app description. 
Choice and control
By choosing express settings during Windows Setup, you turn on the Windows Location Platform. If you choose to customize settings, you can control the Windows Location Platform by selecting Let Windows and apps request my location from the Windows Location Platform under Share info with Microsoft and other services. The first time each Store app requests your PC’s location, Windows will ask whether you want to allow the app to use your location. You can view and change this setting for each Store app in Permissions in the app’s settings. 
If you use a desktop app that uses Windows Location Platform, it should ask your permission to use your PC’s location, and when it accesses your PC’s location, an icon will appear in the notification area to alert you that your PC’s location has been accessed. Each user can control their own location settings for apps in Privacy in PC settings. In addition, administrators can choose to turn off the location platform for all users in Location Settings in Control Panel. To prevent apps from being notified when geographic boundaries defined by apps are crossed, an administrative user can turn off the Windows Location Framework Service in Control Panel.
Windows Location Provider 
What this feature does
The Windows Location Provider connects to the online Microsoft Location Service, which helps determine your PC’s approximate location based on Wi-Fi networks near your PC and your PC’s IP address.
Information collected, processed, or transmitted
When an app you’ve authorized to receive your location requests it, the Windows Location Platform will ask all installed location providers (including Windows Location Provider) to determine your PC’s current location. The Windows Location Provider will first check to see if it has a stored list of nearby Wi-Fi access points from a prior request made by a location-aware app. If there isn’t already a list of nearby Wi-Fi access points, or the list is out of date, the provider sends information about nearby Wi-Fi access points and GPS information (if available) to the Microsoft Location Service. The service returns your PC’s approximate location back to the provider, which passes the location to the Windows Location Platform, which in turn provides it to the app that requested your PC’s location. Windows Location Provider may also update its stored list of Wi-Fi access points. The Windows Location Provider maintains this list so it can determine your PC’s approximate location without connecting to the Internet each time. This list of access points is encrypted when stored on disk so that apps can’t directly access it.
The information that’s sent about nearby Wi-Fi access points includes BSSID (the MAC address of the Wi-Fi access point) and signal strength. The GPS information includes observed latitude, longitude, direction, speed, and altitude. To help protect your privacy, Windows Location Provider doesn’t send any information to uniquely identify your PC beyond the standard computer information sent with all connections to the Internet. To help protect the privacy of Wi-Fi network owners, Windows doesn’t send information about SSIDs (Wi-Fi access point names) or hidden Wi-Fi networks. For privacy and security purposes, information sent about Wi-Fi networks is sent encrypted via SSL.
If you choose to help improve the Microsoft Location Service, Windows might send information about nearby Wi-Fi access points to Microsoft again after an app has requested your PC’s location. If you’re using a metered Internet connection, Windows will limit the number of times per day it sends this information to limit the use of your Internet connection.
Use of information
The information is used by the Windows Location Provider to give Windows Location Platform the approximate location of your PC when an authorized app requests it.
If you choose to help improve the Microsoft Location Service, the Wi-Fi and GPS info sent to Microsoft is used to improve Microsoft’s location services, which in turn helps to improve the location services provided to your apps. Microsoft doesn’t store any data collected from this service that could be used to identify, contact, target advertising to you, or to track or create a history of your PC’s location. 
Choice and control
The Windows Location Provider is used only if an authorized app has requested your PC’s location. For more info about how to control whether apps can request your PC’s location, see the Windows Location Platform section. If you authorize apps to request your PC’s location, the cached list of nearby Wi-Fi access point locations that are encrypted and stored by the Windows Location Provider will be deleted and replaced periodically.
If you choose express settings while setting up Windows, you choose to help improve the Microsoft Location Service. If you choose to customize settings, you can control whether to help improve the Microsoft Location Service by selecting Send some location data to Microsoft when location-aware apps are used under Help improve Microsoft products and services. After setting up Windows, you can change this setting in Location Settings in Control Panel. If you choose not to help improve the service, you will still be able to use the Windows Location Provider to determine your PC’s approximate location.
You can turn the Windows Location Provider on or off by opening Turn Windows features on or off in Control Panel. If you turn off the Windows Location Provider, you can still use other location providers (such as GPS) with the Windows Location Platform.
Microsoft Active Protection Service
If you use Windows Defender, Microsoft Active Protection Service (MAPS) can help better protect your PC by automatically downloading new signatures for newly-detected malware, and monitoring the security status of your PC. MAPS will send information about malware and other potentially unwanted software to Microsoft, and may also send files that could contain malware. If MAPS detects that your PC is infected with certain types of malware, MAPS might automatically contact you through your Microsoft account to help solve the problem.
Information collected, processed, or transmitted 
MAPS reports include information about potential malware files, such as file names, cryptographic hash, software publisher, size, and date stamps. In addition, MAPS might collect full URLs to indicate the origin of the files, as well as the IP addresses that the potential malware files connect to. These URLs might occasionally contain personal information such as search terms or data entered in forms. Reports might also include the actions you took when Windows Defender notified you that the potentially unwanted software was detected. MAPS includes this information to help Microsoft gauge how effectively Windows Defender can detect and remove malware and potentially unwanted software, and to attempt to identify new malware. 
Reports are automatically sent to Microsoft when: 
•	Windows Defender detects software that hasn’t been analyzed for risks yet. 
•	Windows Defender detects changes to your PC by software that hasn't been analyzed for risks yet.
•	Windows Defender takes action on malware upon detection (as part of its automatic remediation).
•	Windows Defender completes a scheduled scan and automatically takes action on software that it detects based on your settings.
•	Windows Defender scans an ActiveX control in Internet Explorer.
If you choose to join MAPS while setting up Windows, you join with a basic membership. Basic membership reports contain the information described in this section. Advanced membership reports are more comprehensive and might occasionally contain personal information, for example, file paths and partial memory dumps. These reports, along with reports from other Windows Defender users who are participating in MAPS, help our researchers discover new threats more rapidly. Malware definitions are then created, and these updated definitions are made available to all users through Windows Update.
If you join MAPS, Windows Defender might send specific files or web content from your PC that Microsoft suspects might be potentially unwanted software. The sample report is used for further analysis. If a file is likely to contain personal information, you will be prompted before it is sent. If Windows Update hasn’t been able to obtain updated signatures for Windows Defender for a period of time, Windows Defender will attempt to use MAPS to download signatures from an alternate download location.
To help protect your privacy, all information sent to MAPS is sent encrypted via SSL.
To help detect and fix certain kinds of malware infections, Windows Defender regularly sends MAPS some information about the security state of your PC. This includes information about your PC’s security settings and log files describing the drivers and other software that load while your PC starts. A number that uniquely identifies your PC is also sent.
Use of information 
Reports sent to MAPS are used to improve Microsoft software and services. The reports might also be used for statistical, testing, or analytical purposes, and for generating definitions. MAPS doesn’t intentionally collect personal information. To the extent that MAPS might unintentionally collect any personal information, Microsoft won’t use the information to identify, contact, or target advertising to you.
The information about your PC’s security state that MAPS collects is used to determine if certain kinds of malware have infected your PC. In this case, Microsoft uses the contact information in your Microsoft account to contact you with details about the problem and how to fix it. 
Choice and control 
If you choose express settings while setting up Windows, you turn on MAPS. If you choose to customize settings, you can control MAPS by selecting Get better protection from malware by sending info and files to Microsoft Active Protection Service when Windows Defender is turned on under Share info with Microsoft and other services. After setting up Windows, you can change your MAPS membership or settings, including turning off MAPS, in the Settings menu in Windows Defender.
If you receive the Malicious Software Removal Tool through Windows Update, it might send similar information to MAPS even if Windows Defender is turned off. For more info, read the Windows Malicious Software Removal Tool privacy statement at:
http://go.microsoft.com/fwlink/?LinkId=113995
Name and account picture
What this feature does
To provide personalized content, apps can request your name and account picture from Windows. Your name and account picture are displayed under Your account in Accounts in PC settings. If you sign in to Windows with a Microsoft account, Windows will use the name and account picture associated with that account. If you haven’t chosen a picture for your account, your account picture will be a default picture provided by Windows.
Information collected, processed, or transmitted
If you allow apps to access your name and account picture, Windows will provide that information to all apps that request it. Apps might store or transmit this information.
If you sign in to Windows with a domain account, and you choose to allow apps to use your name and account picture, apps that can use your Windows credentials will be allowed to access certain other forms of your domain account information. This information includes, for example, your user principal name (like jack@contoso.com) and DNS domain name (like corp.contoso.com\jack).
If you sign in to Windows with a Microsoft account, or if you sign in to Windows with a domain account connected to a Microsoft account, Windows can automatically sync your account picture on your PC with your Microsoft account picture.
Use of information
If you use a third-party app, how the app uses your name and account picture is subject to the third party’s privacy practices. If you use a Microsoft app, the app’s privacy practices will be explained in its privacy statement.
Choice and control
If you choose express settings while setting up Windows, Windows will allow apps to access your name and account picture. If you choose to customize settings, you can control access to your name and account picture by selecting Let apps use my name and account picture under Share info with Microsoft and other services. After setting up Windows, you can change this setting in Privacy in PC settings. You can change your account picture in Accounts in PC settings. You can also choose to allow certain apps to change your account picture.
If you choose to sync your settings, changes you make to the name or account picture associated with your Microsoft account online will also apply to your PC. For example, if you change your account picture on profile.live.com, it will apply to your PC as well. Similarly, if you change your account picture on your PC, it will become your Microsoft account picture. For information about how to control syncing, see the Sync your settings section.
Advertising Identifier
What this feature does 
To provide more relevant advertising, Windows allows apps to access a unique identifier for each user on a device. You can reset or turn off access to this identifier at any time.
Information collected, processed, or transmitted 
If you allow apps access to the advertising identifier Windows will provide it to all apps that request it. Apps might store or transmit this information.
Use of information 
Your advertising identifier is used by app developers and advertising networks to provide more relevant advertising to you by understanding which apps you use and how you use them. It can also be used by app developers to improve quality of service by allowing them to determine the frequency and effectiveness of ads and to detect fraud and security issues.
If you use a third-party app, how the app uses your advertising identifier is subject to the third party’s privacy practices. 
Choice and control 
If you choose express settings while setting up Windows, Windows will allow apps to use your advertising identifier. If you choose to customize settings, you can control access to your advertising identifier by selecting Let apps use my advertising identifier for experiences across apps under Share info with Microsoft and other services. After setting up Windows, you can change this setting in Privacy in PC settings. If you turn this setting off, no information is sent to apps that request your advertising identifier. If you choose to turn the setting on again, a new identifier will be generated.
Sign in with a Microsoft account 
What this feature does
A Microsoft account (formerly known as Windows Live ID) is a single email address and password you can use to sign in to apps, sites, and services from Microsoft and select Microsoft partners. You can sign up for a Microsoft account in Windows or on Microsoft websites that require you to sign in with a Microsoft account. 
You can choose to sign in to Windows with a Microsoft account or choose to connect your local or domain account to a Microsoft account. If you do this, Windows can help make your PCs look and feel the same by automatically syncing settings and info in Windows and Microsoft apps. If you visit a website where you use a Microsoft account to sign in, Windows will also sign you in to that website automatically.
Information collected, processed, or transmitted
When you enter an email address to use as a Microsoft account while setting up your PC or in Accounts in PC settings, Windows sends the email address to Microsoft to determine if there’s already a Microsoft account associated with that email address. If you already use that email address as a Microsoft account, you can use it and the password for the Microsoft account to sign in to Windows. If you don’t already have enough security info for your Microsoft account, we might first ask you for additional security info, such as a mobile phone number that we can use to verify the account is yours. If you don’t have a Microsoft account, you can create one using any email address.
When you sign in with a Microsoft account, Windows will also send standard computer information to Microsoft, including your device’s manufacturer, model name, and version.
Each time you sign in to Windows with a Microsoft account while your PC is connected to the Internet, Windows verifies your email address and password with Microsoft’s servers. When you’re signed in to Windows with your Microsoft account or with a domain account connected to your Microsoft account:
•	Certain Windows settings will sync between the PCs that you sign in to with your Microsoft account. For more info about what settings are synced and how to control them, see the Sync your settings section. 
•	Microsoft apps that use a Microsoft account for authentication (like Mail, Calendar, People, Microsoft Office, and other apps) can automatically begin downloading your info (for example, the Mail app will automatically download the messages sent to your Outlook.com or Hotmail.com address if you have one). Web browsers can automatically sign you in to websites that you sign in to with your Microsoft account (for example, if you visit SkyDrive.com, you might be automatically signed in without needing to reenter your Microsoft account password).
Windows will ask your permission before allowing third-party apps to use profile information or other personal information associated with your Microsoft account. If you sign in to Windows with a domain account connected to a Microsoft account, the settings and info you choose will sync with your domain account, and you’ll automatically be signed in to apps and websites as described above. Because domain administrators are able to access any information on your PC, they will also be able to access any settings and info you’ve chosen to sync with other PCs through your Microsoft account. This can include settings such as name, account picture, and browser history. For more info about what settings are synced and how to control them, see the Sync your settings section.
Use of information
When you create a new Microsoft account in Windows, we use the information you provide to create and help secure the account. For example, the security info you provide (like your phone number or alternate email address) is only used if you can’t sign in to your account. When you’re signed in to Windows with a Microsoft account, Windows uses your Microsoft account info to sign you in to apps and websites automatically. To learn more about the privacy impact of having a Microsoft account, read the Microsoft account privacy statement. For info about how individual Microsoft apps use information associated with your Microsoft account, see the privacy statements for each app. You can find the privacy statement for a Microsoft app by opening Settings from within the app, or in the About dialog.
Standard device information may be used to personalize certain communications to you, such as emails intended to help you get started with your device.
Choice and control
When you sign in to Windows with a Microsoft account, some settings are synced automatically. To learn how to change which Windows settings are synced or to stop syncing, see the Sync your settings section. To learn more about the data collected by Microsoft apps that use a Microsoft account for authentication, read their privacy statements. 
You don’t have to sign in to Windows with a Microsoft account. When you add a user to your PC while setting up your PC or in Accounts in PC settings, you can choose to use a local account or a Microsoft account. You can switch to a local account or Microsoft account at any time in Accounts in PC settings. If you sign in to Windows with a domain account, you can connect or disconnect your Microsoft account at any time in Accounts in PC settings.
When you use InPrivate Browsing in Internet Explorer, you won’t be automatically signed in to websites that use Microsoft accounts.
Sync your settings
What this feature does
When you sign in to Windows with a Microsoft account, Windows syncs some of your settings and info with Microsoft servers to make it easier to have personalized experiences across multiple PCs. After you’ve signed into one or more PCs with a Microsoft account, when you sign into another PC with the same Microsoft account for the first time, Windows will download and apply the settings and info you choose to sync from your other PCs. Settings you choose to sync will automatically update on Microsoft servers and your other PCs as you use them.
Information collected, processed, or transmitted
If you choose to sign in to Windows with a Microsoft account, Windows syncs certain settings with Microsoft servers. These settings include:
•	The layout of your Start screen
•	Apps you’ve installed from the Windows Store
•	Language preferences
•	Ease of Access preferences
•	Personalization settings such as your account picture, lock screen image, background, and mouse settings
•	Settings for Windows Store apps
•	Spell checker dictionaries, IME dictionaries, and personal dictionaries
•	Web browser history, favorites, and websites you have open
•	Saved app, website, and network passwords
•	Addresses of shared network printers that you’ve connected to
To help protect your privacy, all synced settings are sent encrypted via SSL. Some of these settings won't sync on your PC until you add your PC to your Microsoft account as a trusted PC.
If you sign in to Windows with a domain account connected to a Microsoft account, settings and info you’ve chosen will sync to your domain account. Passwords that you save while signed into Windows with a domain account connected to a Microsoft account will never be synced. Because domain administrators are able to access any information on your PC, they’ll also be able to access any settings and info you’ve chosen to sync with other PCs through your Microsoft account.
Use of information
Windows uses these settings and info to provide the syncing service. Microsoft doesn’t use your synced settings and info to identify, contact, or target advertising to you.
Choice and control
When you sign in to Windows with a Microsoft account, Sync your settings will be turned on. You can choose to sync your settings, and control what is synced, by going to Sync settings under SkyDrive in PC settings. If you sign in to Windows with a domain account and you choose to connect that account to a Microsoft account, Windows will ask which settings you want to sync before connecting your Microsoft account. 
Update Services
What this feature does
Update Services for Windows include Windows Update and Microsoft Update: 
•	Windows Update is a service that provides you with software updates for Windows software and other supporting software such as drivers and firmware supplied by device manufacturers. 
•	Microsoft Update is a service that offers you new software from Microsoft and provides you with software updates for Windows software, as well as other Microsoft software such as Microsoft Office. 
Information collected, processed, or transmitted
The Update Services collect info from your computer that allows us to operate and improve the services, such as:
•	The Microsoft software and other supporting software (e.g., drivers and firmware supplied by device manufacturers) installed on your computer for which the Update Services have updates available. This helps us determine which updates are appropriate for you. 
•	Your Windows Update and/or Microsoft Update configuration settings, such as whether you want updates automatically downloaded or installed. 
•	The successes, failures, and errors you experience when accessing and using the Update Services. 
•	Plug and Play ID numbers of hardware devices – a code assigned by the device manufacturer that identifies the device (e.g., a particular type of keyboard). 
•	Globally Unique Identifier (GUID) – a randomly generated number that doesn’t contain any personal information. GUIDs are used to identify individual PCs without identifying the user. 
•	BIOS name, revision number, vendor, and revision date – info about the set of essential software routines that test your hardware, start the operating system on your computer, and transfer data among hardware devices connected to your computer. 
•	Manufacturer, Model, Platform Role, and SKU Number—information about the PC used to enable diagnostic investigations into driver installations.
You can use these Update Services by going to Windows Update in Control Panel and checking for updates or changing your settings to allow Windows to automatically install updates as they become available (recommended). Within the Windows Update feature you can choose whether to opt in to Microsoft Update.
If you choose to get important software updates for your PC, the Windows Malicious Software Removal Tool (MSRT) might be included with these updates. MSRT checks computers for infections by specific, prevalent malicious software (“malware”) and helps remove any infections found. If the software runs, it will remove the malware listed on the Microsoft Support website. During a malware check, a report will be sent to Microsoft with specific info about malware detected, errors, and other info about your computer. For more info, read the Windows Malicious Software Removal Tool privacy statement at:
http://go.microsoft.com/fwlink/?LinkId=113995
Use of information
The data sent to Microsoft is used to operate and maintain the Update Services. It is also used to generate aggregate statistics that help us analyze trends and improve our products and services, including the Update Services.
To generate aggregate statistics, the Update Services use the GUID collected by the Update Services to track and record the number of individual computers that use the Update Services and whether the download and installation of specific updates succeeds or fails. The Update Services record the GUID of the computer that attempted the download and installation, the ID of the item that was requested, whether updates were available, and standard computer information.
The MSRT information described above is used to help improve our anti-malware and other security products and services. No information in the MSRT reports will be used to identify or contact you.
Required updates
If you turn on the Update Services, in order for them to properly function some software components on your system that make up or are directly related to the Update Services will need to be updated from time to time. These updates must be performed before the service can check for, download, or install other updates. These required updates fix errors, provide ongoing improvements, and maintain compatibility with the Microsoft servers that support the service. 
If the Update Services are turned off, you won’t receive these updates.
Software updates required to install or update Windows Store apps will be downloaded and installed automatically. These updates must be performed for apps to function properly. 
Cookies and tokens
A token is similar to a cookie. It stores information in a small file that is placed on your hard disk by the Update Services server, and is used when your computer connects to the Update Services server to maintain a valid connection. It is stored on your computer only, not on the server. This cookie or token contains information (such as last scan time) in order to find the most recently available updates. It contains information to manage what content should be downloaded to your computer, when that should happen, as well as a GUID to identify your computer to the server.
Information contained in the contents of the cookie/token is encrypted by the server (with the exception of the cookie or token expiration time). This cookie ortoken is not a browser cookie so it cannot be controlled with your browser settings. The cookie or token cannot be removed; however, if you don’t use the Update Services, the cookie/token will not be used.
Choice and control
If you choose express settings while setting up Windows, the Windows Update service is turned on and set to install updates automatically.
If you turn on the Update Services, regardless of which setting you’ve chosen, required updates to some components of the service will be downloaded and installed automatically without further notice to you. If you’d prefer not to receive required updates, turn off the Update Services.
You can also choose whether to check for or automatically install Important and Recommended updates for your computer or Important updates only. Optional updates are never installed automatically. After setting up Windows, you can change your Windows Update settings in Control Panel or in PC settings.
If you’ve chosen to check for and install important updates, and receive MSRT as part of these updates for your computer, you can disable the software's reporting functionality by following the instructions at:
http://www.support.microsoft.com/?kbid=890830
Windows Store automatic app apdates
What this feature does
This feature checks for, downloads, and installs updates to Windows Store apps to ensure that you have the latest versions. App updates may include security updates, performance updates, or new functionality or content. Updated apps might use different Windows capabilities than the previous versions, which could give them access to different resources on your PC. You can learn about capability changes on the Product Description Page for the app in the Windows Store.
Information collected, processed, or transmitted
To provide automatic app updates, the Store sends the following information to Microsoft: 
•	A list of all the apps installed from the Store by all users on your PC
•	The licensing information for each app
•	The successes, failures, and errors you experience when updating apps from the Store
•	Globally Unique Identifier (GUID) – a randomly generated number that doesn't contain any personal information
•	BIOS name, revision number, and revision date 
•	Basic information about your PC, such as manufacturer, model, and the edition of Windows you’re using
Use of information
This information is used to provide the update service. It is also used to generate aggregate statistics that help us analyze trends and improve our products and services. It isn’t used to identify, contact, or target advertising to you. 
Choice and control  
If you choose express settings when setting up Windows, the Windows Store will check for, download, and install app updates automatically, even if you’re signed out of the Windows Store. If you turn off automatic app updates, you can choose whether or not you want to install an app update when you sign in to the Windows Store. 

To turn off app automatic updates:
•	Open the Windows Store
•	Swipe in from the right edge of the screen, then tap Settings.
If you’re using a mouse, point to the lower-right corner of the screen, then click Settings.
•	Tap or click App updates.
•	Tap or click Automatically update my apps to turn off automatic app updates.
To learn about what the most current version of the app can do, and to learn when an app was last updated, you can review the Product Description Page for the app in the Windows Store.  

Help improve Windows Store by sending URLs for the web content that apps use
What this feature does 
Some apps you get from the Store are like websites and might expose your computer to potentially unsafe software, such as malware. If you choose to turn this feature on, it collects information about the web content used by these apps to help Microsoft diagnose potentially unsafe behavior. For example, Microsoft might use this information to remove an app from the Store. 
Information collected, processed, or transmitted 
If you choose to send information about the web content used by your apps, Microsoft will collect information about the URLs and types of content that these apps access when you use them. This can help us identify which of these apps are receiving content from harmful or unsafe websites. Reports sent to Microsoft include information such as the name or identifier of the app, the full URLs of addresses the app accesses, and full URLs that indicate the location of any JavaScript that the app accesses. Windows generates a number called a globally unique identifier (GUID) that is sent to Microsoft with each report. The GUID lets us determine which data is sent from a particular computer over time. The GUID doesn’t contain any personal information and isn’t used to identify you. 
To help protect your privacy, the information sent to Microsoft is encrypted. Information that might be associated with a webpage that these apps access, such as search terms or data you entered into apps, might be included. For example, if you look up a word in a dictionary app, the word you look up might be included in the information sent to Microsoft as part of the full address accessed by the app. Microsoft filters these addresses to try to remove personal information where possible. 
Use of information 
Microsoft periodically reviews the information sent to help detect apps that might be interacting with unsafe web content, such as harmful web addresses or scripts. We might use this information to take action against potentially harmful apps. Addresses of web content can unintentionally contain personal information, but this information isn't used to identify, contact, or target advertising to you. We use the GUID to determine how widespread the feedback we receive is and how to prioritize it. For example, the GUID allows Microsoft to distinguish between potentially unsafe behavior occurring 100 times on a single PC, and the same behavior occurring once on each of 100 PCs. 
Choice and control 
If you choose express settings while setting up Windows, Windows will send information about the web content used by your apps from the Store built using JavaScript. If you choose to customize settings, you can control this setting by selecting Use SmartScreen online services to help protect against malicious content in sites loaded by Windows Store apps and Internet Explorer, and in malicious downloads under Help protect your PC and your privacy. After installation, you can change this setting in Privacy in PC settings. 
Windows Customer Experience Improvement Program (CEIP)
What this feature does
The Windows Customer Experience Improvement Programs (CEIP) can collect information about how you use your apps, your PCs, connected devices, and Windows. It can also collect information about performance and reliability problems that might occur. If you choose to participate in Windows CEIP, Windows will send this data to Microsoft, and will also periodically download a file to collect more relevant information about how you use Windows and apps. CEIP reports are sent to Microsoft to help improve the features our customers use most often, and to create solutions to common problems.
Information collected, processed, or transmitted
CEIP reports can include information such as:
•	Configuration information, including how many processors are in your PC, the number of network connections in use, screen resolutions for display devices, and which version of Windows is running.
•	Performance and reliability information, including how quickly an app responds when you click a button, how many problems you experience with an app or a device, and how quickly information is sent or received over a network connection.
•	App use information, including information about the features you use most often, such as how frequently you open apps, how often you use Windows Help and Support, which services you use to sign in to apps, and how many folders you typically create on your desktop.
CEIP reports also contain information about events (event log data) on your PC from up to seven days prior to the time you decide to participate in CEIP. Since most users decide to participate in CEIP within several days of setting up Windows, Microsoft uses this information to analyze and improve the Windows setup experience.
This information is sent to Microsoft when you're connected to the Internet. CEIP reports don’t intentionally contain contact information, such as your name, address, or phone number; however, some reports might unintentionally contain individual identifiers, such as a serial number for a device that is connected to your PC. Microsoft filters the information contained in CEIP reports to try to remove any individual identifiers that they might contain.
CEIP randomly generates a number called a globally unique identifier (GUID) that is sent to Microsoft with every CEIP report. The GUID lets us determine which data is sent from a particular computer over time. Some CEIP reports may also include GUIDs derived from your Microsoft account. 
CEIP will also periodically download a file to collect more relevant information about the way you use Windows and apps. This file helps Windows collect additional information to help Microsoft create solutions for common problems and better understand usage patterns of Windows and apps.
Use of information
Microsoft uses CEIP information to improve our products and services, as well as third-party software and hardware designed for use with these products and services. We might also share aggregate CEIP information with Microsoft partners, so they can improve their products and services, but the information shared is in aggregated form and can’t be used to identify, contact, or target advertising to you. We use the GUID to distinguish how widespread the feedback we receive is and how to prioritize it. For example, the GUID allows Microsoft to distinguish between one customer experiencing a problem one hundred times and one hundred customers experiencing the same problem once. Microsoft doesn’t use the information collected by CEIP to identify or contact you.
Choice and control
If you choose express settings while setting up Windows, you turn on Windows CEIP: Windows and Microsoft apps from the Windows Store will be able to send CEIP reports for all users on your PC. If you choose to customize settings, you can control CEIP by selecting Send Microsoft info about how I use my PC, as part of the Customer Experience Improvement Program under Help improve Microsoft products and services. After setting up Windows, administrators can change this setting in Action Center in Control Panel.
For more info, see the CEIP frequently asked questions at: 
http://go.microsoft.com/fwlink/?LinkID=52095
Windows Error Reporting 
What this feature does 
Windows Error Reporting helps Microsoft and Microsoft partners diagnose problems in the software you use and provide solutions. Not all problems have solutions, but when solutions are available, they’re offered as steps to solve a problem you’ve reported or as updates to install. To help prevent problems and make software more reliable, some solutions are also included in service packs and future versions of the software. 
Information collected, processed, or transmitted 
Many software products are designed to work with Windows Error Reporting. If a problem occurs in one of these products, you might be asked if you want to report it.
Windows Error Reporting collects information that is useful for diagnosing and solving a problem that has occurred, such as where the problem happened in the software or hardware, the type or severity of the problem, files that help describe the problem, basic software and hardware information, or possible software performance and compatibility problems. If you use Windows to host virtual machines, error reports sent to Microsoft might include information about virtual machines.
Windows Error Reporting also collects information about apps, drivers, and devices to help Microsoft understand and improve app and device compatibility. Information about an app might include the name of the app’s executable files. Information about devices and drivers might include the names of devices you’ve installed on your PC and the executable files associated with those devices’ drivers. Information about the company that published an app or driver might be collected. 
If you choose to turn on automatic reporting while setting up Windows, the reporting service will automatically send basic information about where problems occur. In some cases, the reporting service will automatically send additional information to help diagnose the problem, such as a partial snapshot of PC memory. Some error reports might unintentionally contain personal information. For example, a report that contains a snapshot of PC memory might include your name, part of a document you were working on, or data that you recently submitted to a website. 
To help diagnose certain types of problems, Windows Error Reporting might create a report containing extra information, such as log files. Before sending a report containing this additional information, Windows will ask if you want to send the report, even if you’ve turned on automatic reporting.
After you send a report, the reporting service might ask you for more info about the problem that occurred. If you choose to provide your phone number or email address in this information, your error report will be personally identifiable. Microsoft might contact you to request additional information to help solve the problem you reported.
Windows Error Reporting randomly generates a number called a globally unique identifier (GUID) that is sent to Microsoft with every error report. The GUID lets us determine which data is sent from a particular computer over time. The GUID doesn’t contain any personal information.
To help protect your privacy, the information is sent encrypted via SSL.
Use of information 
Microsoft uses information about errors and problems reported by Windows users to improve Microsoft products and services, as well as third-party software and hardware designed for use with these products and services. We use the GUID to determine how widespread the feedback we receive is and how to prioritize it. For example, the GUID allows Microsoft to distinguish between one customer experiencing a problem one hundred times and one hundred customers experiencing the same problem once.
Microsoft employees, contractors, vendors, and partners might be provided access to relevant portions of the information collected, but they’re only permitted to use the information to repair or improve Microsoft products and services, or third-party software and hardware designed for use with Microsoft products and services. If an error report contains personal information, Microsoft doesn’t use the information to identify, contact, or target advertising to you. However, if you choose to provide contact information as described above, we may use this information to contact you.
Choice and control 
If you choose express settings while setting up Windows, Windows Error Reporting will automatically send basic reports to check for solutions to problems online. If you choose to customize settings, you can control Windows Error Reporting by selecting Use Windows Error Reporting to check online for solutions to problems under Check online for solutions. After setting up Windows, you can change this setting in Action Center in Control Panel.
For more info, see the Microsoft Error Reporting Service privacy statement at:
http://go.microsoft.com/fwlink/?LinkId=50163 
Windows Help Experience Improvement Program
What this feature does
The Help Experience Improvement Program (HEIP) helps Microsoft identify trends in the way our customers use Windows Online Help and Support so that we can improve our search results and the relevancy of our content.
Information collected, processed, or transmitted
HEIP sends Microsoft information about the version of Windows that your PC is running and about how you use Windows Help and Support, including queries you enter when you search Windows Help and Support and any ratings or feedback on the Help topics presented to you. When you search, browse, or provide any ratings or feedback on the Help topics presented to you, this information will be sent to Microsoft. 
HEIP randomly generates a number called a globally unique identifier (GUID) that is sent to Microsoft with every HEIP report. The GUID lets us determine which data is sent from a particular machine over time. The GUID doesn’t contain any personal information. The GUID is separate from the GUIDs used by Windows Error Reporting and Windows CEIP. 
Use of information
The data collected is used to identify trends and usage patterns so that Microsoft can improve the quality of content we provide and the relevance of our search results. We use the GUID to determine how widespread the issues we receive are and how to prioritize them. For example, the GUID allows Microsoft to distinguish between one customer experiencing an issue one hundred times and one hundred customers experiencing the same issue once.
The Help Experience Improvement Program doesn’t intentionally collect any information that could be used to personally identify you. If you type such information into the search or feedback boxes, the information will be sent, but Microsoft doesn’t use the information to identify, contact, or target advertising to you. 
Choice and control
If you choose express settings while setting up Windows, you join the Help Experience Improvement Program. If you choose to customize settings, you can control Help Experience Improvement Program settings by selecting Send Microsoft info about how I use Help, as part of the Help Experience Improvement Program under Help improve Microsoft products and services. After setting up Windows, you can change this setting in Windows Help and Support. 
Windows Search
What this feature does 
Windows Search lets you search your device and the Internet from one place. To provide better search results, Windows Search can use Bing and the Windows Location Platform.  Please note that there are other search features on your device provided by Microsoft, such as search in the Windows Store, Internet Explorer, and other Microsoft products.  
Information collected, processed, or transmitted 
If you choose to get web search results, Windows sends what you type in Windows Search to Microsoft. To help improve search results, Windows Search also sends information to Microsoft about how you interact with the feature. Windows Search also sends an identifier to provide personalized search results based on your interactions with Bing and other Microsoft products and services. If you sign in to Windows with a Microsoft account, the identifier will be associated with your Microsoft account. You can choose not to get personalized results in Windows Search, in which case this identifier will not be sent.
If you allow Windows Search to use your location, the physical location of your device as provided by the Windows location platform will be sent to Microsoft as a part of each search request. Alternatively, we may attempt to derive your approximate physical location based on your IP address.   
When you use Windows Search to search within an app, your search terms are provided to the app.
Use of information 
If you choose to use Windows Search to get web search results, we use the search term you’ve provided, your local and online search history, information associated with your Microsoft account, and the location of your device to provide relevant search suggestions, personalized search results, and personalized experiences in other Microsoft products and services. To learn more about how your data is used, read the Bing privacy statement at: http://go.microsoft.com/fwlink/?linkid=248686
When you use Windows Search to search within a third-party app, use of the information collected will be subject to the third-party's privacy practices. If you search within a Microsoft app, the app's privacy practices will be explained in its privacy statement.
Choice and control 
If you choose express settings when setting up Windows, you allow Windows Search to get search suggestions and web results, and you allow Microsoft to use data from Windows Search (including location) to personalize Windows Search and other Microsoft experiences. If you choose to customize settings, you can decide whether to change these settings for Windows Search. After setting up Windows, you can change these settings in Search in PC settings. 
You can also clear your search history and turn off personalized search results for Windows Search in Search in Search & apps in PC settings. This clears your local search history and instructs Microsoft not to use any previously collected search history stored by Bing that’s used to personalize your Windows Search experience. It doesn’t delete information that is used by Microsoft in aggregate to improve search results and other Microsoft experiences. That information is retained and anonymized as described in the Bing privacy statement at: 
http://go.microsoft.com/fwlink/?linkid=248686
Windows SmartScreen
What this feature does 
Windows SmartScreen helps keep your PC safe by checking downloaded files and web content within apps to help protect you from malicious software and potentially unsafe web content. Before an unknown or potentially unsafe downloaded file is opened, Windows will display a warning. If SmartScreen detects potentially unsafe web content in an app, Windows will display a warning in place of the content.
Information collected, processed, or transmitted 
If you choose to use Windows SmartScreen to check downloaded files, Windows sends information to the SmartScreen online service about some of the apps you use and some of the files you download from the Internet. This information might include a file name, file identifier (“hash”), and digital certificate information along with standard PC information and the Windows SmartScreen filter version number. To help protect your privacy, the information sent to Microsoft is encrypted via SSL.
If you choose to use Windows SmartScreen to block potentially unsafe content in apps, Windows sends information to the SmartScreen online service including the addresses and types of content that apps access when you use them. In response, the online service tells your PC whether the content has been reported to Microsoft as unsafe or suspicious. Reports sent to Microsoft include information such as the name or identifier of the app and the full addresses of web content accessed by the app. 
To help protect your privacy, the information sent to Microsoft is encrypted. Information that might be associated with a webpage accessed inside an app, such as search terms, might be included in the address sent to Microsoft. For example, if you look up a word in a dictionary app, the word you look up might be sent to Microsoft as part of the full address accessed by the app. Microsoft filters these addresses to try to remove personal information where possible. 
Windows generates a number called a globally unique identifier (GUID) that is sent to Microsoft with each report. The GUID lets us determine which data is sent from a particular computer over time. The GUID doesn’t contain any personal information.
Use of information 
Microsoft uses the information described above to provide warnings to you about potentially unsafe downloaded files and content within apps. For example, if SmartScreen detects a potential threat inside an app that supports SmartScreen, Windows will display a warning in place of the content. We also use the information to improve SmartScreen and other products and services. Microsoft doesn’t use the information to target advertising to you.
Choice and control 
If you choose express settings while setting up Windows, you turn on Windows SmartScreen. If you choose to customize settings, you can control Windows SmartScreen by selecting Use SmartScreen online services to help protect against malicious content in sites loaded by Windows Store apps and Internet Explorer, and malicious downloads under Help protect your PC and your privacy. After setting up Windows, you can change this setting in Action Center in Control Panel. For info about Internet Explorer SmartScreen, see the SmartScreen Filter section of the Internet Explorer privacy statement at:
http://go.microsoft.com/fwlink/?LinkId=239590