Windows 11 collects diagnostic data by default, personalizes ads with a per-user advertising ID, and remembers a surprising amount about how you use the machine. All of the meaningful toggles live in Settings, but they're spread across half a dozen pages, and plenty of guides either miss half of them or promise an "off switch" that doesn't exist. This is the full walkthrough, plus an honest account of what each toggle covers and where the floor is.
Prefer it done for you? eclean's Optimizer includes a privacy category that covers these settings with each one explained before you apply it, and a history so supported changes can be reverted. It's free, with no trial timer. Download eclean for Windows.
1. What Windows telemetry is, and isn't
Worth being precise, because both the marketing and the panic get it wrong. Windows diagnostic data is information about the system (hardware, settings, driver reliability, which features get used, crash reports). It comes in two tiers, required, which Microsoft treats as non-negotiable and documents publicly, and optional, which adds detail like browsing data from Microsoft browsers and enhanced error reports.
With the toggles below set, Windows is not reading your files or logging your keystrokes. The separate, more advertising-shaped tracking (the advertising ID, "tailored experiences," activity-based suggestions) is also covered below, and those can be fully turned off. The required diagnostic tier can't be, on Home or Pro. Knowing which is which keeps you from chasing an off switch that isn't there, or from running a script that promises one. More on that in our look at debloat scripts.
2. Cut diagnostic data to required only
Open Settings → Privacy & security → Diagnostics & feedback:
- Turn off Send optional diagnostic data. This is the big one; the remaining required tier is device and reliability data.
- Turn off Improve inking and typing, so typing data doesn't feed Microsoft's language processing.
- Turn off Tailored experiences, which lets Microsoft use your diagnostic data for personalized tips and ads.
- Expand Delete diagnostic data and click Delete to clear what's already been collected from this device.
3. Turn off the advertising ID and suggestions
Go to Settings → Privacy & security → General and turn off all four:
- Let apps show me personalized ads by using my advertising ID
- Let websites show me locally relevant content by accessing my language list
- Let Windows improve Start and search results by tracking app launches
- Show me suggested content in the Settings app
Two more suggestion faucets live elsewhere. In Settings → Personalization → Start, turn off Show recommendations for tips, shortcuts, new apps, and more, and in Settings → System → Notifications, expand Additional settings and uncheck the suggestion and welcome-experience boxes.
4. Clear activity history and search history
Under Settings → Privacy & security → Activity history, turn off Store my activity history on this device and click Clear history. (Older builds had a second toggle for sending activity history to Microsoft. Current Windows 11 no longer syncs it at all.)
Then open Privacy & security → Search permissions. Turn off Show search highlights, and under History, turn off search history on this device. If you don't want account-wide results in Start search, disable the Microsoft account and Work or School account cloud content search toggles too.
5. Review location and the app permissions
Settings → Privacy & security → Location controls the master switch; turn Location services off entirely, or leave it on and disable Let apps access your location per app. While you're in Privacy & security, the same pattern applies to Camera, Microphone, and Speech. Each page has a master toggle and a per-app list. Turning off Online speech recognition stops voice clips going to Microsoft. Voice typing stops working with it, which is the honest trade.
6. On Pro: lock it in with Group Policy
Windows 11 Pro includes the Group Policy editor, which makes the diagnostic setting stick through updates and applies to every user on the machine. Press Win+R, run gpedit.msc, then go to Computer Configuration → Administrative Templates → Windows Components → Data Collection and Preview Builds. Open Allow Diagnostic Data, set it to Enabled, and choose Send required diagnostic data.
One catch worth knowing. The dropdown also offers Diagnostic data off (not recommended), but that value is only honored on Enterprise, Education, and Server editions. On Pro, selecting it falls back to required. Group Policy on Pro lowers the ceiling. It doesn't remove the floor.
7. What you can't turn off on Home
Being straight about the limits:
- Required diagnostic data. There is no supported off switch on Home or Pro. Microsoft documents what this tier contains, and it's system-level data, but it flows.
- Group Policy. Home has no
gpedit.msc. The equivalent registry value (AllowTelemetry) exists but obeys the same edition floor. - Infrastructure connections. Windows Update, licensing, SmartScreen, and Defender's cloud protection all phone home as part of doing their jobs. They're not advertising telemetry, and blocking them breaks real security features.
That last point is why hosts-file blocklists and "disable all telemetry" scripts are a bad trade. They can't lower the diagnostic floor either, so what they actually break is updating and threat protection. The settings above get you everything that's actually gettable.
Keep it this way without the ritual
These toggles don't always stay put. Feature updates occasionally reset them, new suggestion surfaces appear, and a new user account starts from the defaults. Optimizer keeps the privacy settings in one reviewed list, explains what each change does before you apply it, and keeps a history with a route back, so re-checking after an update takes a minute instead of a tour through six Settings pages. Download eclean free. The core stays free for good.
