Microsoft is committed to protecting your privacy. This privacy statement explains the data collection and use practices of the Windows Update and Microsoft Update services (the "Update Services"). This statement does not apply to other online or offline Microsoft sites, products, or services.
Some updates available through the Update Services can only be obtained by users that have validated they are running genuine Microsoft software. Genuine Microsoft software validation is covered by a separate privacy statement that you can see by clicking here.
You can use the Update Services in two ways:
The Update Services collect information from your computer that allows us to operate and improve the services, such as:
You can use the Update Services in two ways:
When you use the Update Services, information about your computer ("standard computer information") is sent to Microsoft. Standard computer information typically includes information such as your IP address, operating system version, your hardware ID which indicates the device manufacturer, device name, and version and your regional and language settings. Using data provided by a third party, we may derive a general geographic area based on your IP address before we delete it. We use this information to help operate and improve our products and services, including the Update Services.
If you use the Windows Update or Microsoft Update web site to access the Update Services, in addition to the information described above, we will collect information about your browser version, the pages you visit and the actions you take. For more information about what data is collected and how it is used when you access these web sites, see the Microsoft Online Privacy Statement.
The data sent to Microsoft is used to operate and maintain the Update Services. It is also used to generate aggregate statistics that help us analyze trends and improve our products and services, including the Update Services.
For example, the Update Services use the GUID:
Information collected by Microsoft software, sites, and services may be stored and processed in the United States or any other country in which Microsoft or its affiliates, subsidiaries or agents maintain facilities, and by using Microsoft software, sites or services, you consent to any such transfer of information outside of your country. Microsoft abides by the safe harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union, the European Economic Area, and Switzerland. Microsoft may disclose this information in order to (a) comply with the law or respond to lawful requests or legal process; (b) protect the rights or property of Microsoft or our customers, including the enforcement of our agreements or policies governing your use of the services; or (c) act on a good faith belief that such access or disclosure is necessary to protect the personal safety of Microsoft employees, customers or the public. We may also disclose this information as part of a corporate transaction such as a merger or sale of assets.
Microsoft occasionally hires other companies to provide limited services on its behalf, such as providing customer support, processing transactions, or performing statistical analysis of reports. Microsoft will provide these companies only the information they need to deliver the service. They are required to maintain the confidentiality of the information and are prohibited from using it for any other purpose.
If you turn on the Update Services, in order for them to properly function some software components on your system that make up or are directly related to the Update Services will need to be updated from time to time. These updates must be performed before the service can check for, download, or install other updates. These required updates fix errors, provide ongoing improvements, and maintain compatibility with the Microsoft servers that support the service. If the Update Services are turned off, you will not receive these updates.
Update Services are "turned on" if you choose one of the following settings: (i) install updates automatically, (ii) download updates automatically and choose whether to install them, or (iii) receive notifications about updates and choose whether to download and install them. Windows Update service is "turned on" and set to "install updates automatically" when you choose the recommended option during Windows Out Of Box Experience (OOBE) setup.
If you turn on the Update Services, regardless of which "turned on" setting you have chosen, required updates to some components of the service will be downloaded and installed automatically without further notice to you. If you would prefer not to receive required updates, turn off the Update Services.
A token is similar to a cookie. It stores information in a small file that is placed on your hard disk by the Update Services server, and is used when your computer connects to the Update Services server to maintain a valid connection. It is stored on your computer only, not on the server. This cookie/token contains information (such as last scan time) in order to find the most recently available updates. It contains information to manage what content should be downloaded to your computer, when that should happen, as well as a GUID to identify your computer to the server. Information contained in the contents of the cookie/token is encrypted by the server (with the exception of the cookie/token expiration time). This cookie/token is not a browser cookie so it cannot be controlled with your browser settings. The cookie/token cannot be removed; however, if you do not use the Update Services, the cookie/token will not be used.
Occasionally you might be invited to participate in a survey about the way you use the Windows Update or Microsoft Update Services. Each survey includes a privacy statement that details the way Microsoft will use the information submitted with that survey.
You can view a sample of the information Microsoft will collect from your computer on our web site. Note the data provided is sample data only – individual results may vary based on your specific machine configuration.
You may change your Update Services settings after Windows setup via the Start menu. In Windows Vista and Windows 7, go to the Start menu and select All Programs, then select Windows Update, then select Change Settings. In Windows XP, go to the Start menu and select Control Panel, then select Automatic Updates. To turn off the Update Services (including required updates), select Never check for updates in Windows Vista and Windows 7 or select Turn off Automatic Updates in Windows XP.
Microsoft is committed to helping protect the security of the information we collect. The Update Services use a variety of security technologies and procedures to help protect the information collected from unauthorized access, use, or disclosure. For example, when your computer is scanned to determine what software is on your machine, we use encryption, such as the Secure Socket Layer (SSL) protocol. The information collected is stored on computer servers with limited and controlled access.
Microsoft may update this privacy statement. If we do, we will revise the "Last updated" information at the top of the statement. To stay informed about how we are helping protect the information collected by the Update Services, we encourage you to periodically review the privacy statement.
Microsoft welcomes your comments regarding this privacy statement. If you believe that Microsoft has not adhered to this statement, please contact us by using this web form. We will use commercially reasonable efforts to promptly determine and remedy the problem.
c/o the Microsoft Privacy Response Center
Microsoft Corporation
One Microsoft Way
Redmond, WA, 98052 USA
To find contact details for the Microsoft subsidiary or affiliate in your country or region, see the Microsoft Worldwide web site at www.microsoft.com/worldwide.