Microsoft Privacy Statement
Last Updated: July 2026
Cookies
Most Microsoft sites use cookies, small text files placed on your device which web servers utilize in the domain that placed the cookie can retrieve later. We use cookies to store your preferences and settings, help with sign-in, provide personalized ads, and analyze site operations. For more information, see the Cookies and similar technologies section of this privacy statement.
EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks
Microsoft complies with the EU-U.S., UK Extension to the EU-U.S., and Swiss-U.S. Data Privacy Frameworks. To learn more, see the Storage and processing of personal data section, and visit the U.S. Department of Commerce’s Data Privacy Framework website.
Contact us
If you have a privacy concern, complaint, or question for the Microsoft privacy team or Data Protection Officer, please visit our privacy support and requests page and click on “Contact the Microsoft privacy team or the Microsoft Data Protection Officer” menu. For more information about contacting Microsoft, including Microsoft Ireland Operations Limited, see the How to contact us section of this privacy statement.
Your privacy is important to Microsoft. This privacy statement explains the personal data we process, how we process it, and for what purposes.
Microsoft offers a wide range of products, including server products used to help operate enterprises worldwide, devices customers use in their homes, software that students use at school, and services developers use to create and host new products. References to Microsoft products in this statement include Microsoft services, websites, apps, software, servers, and devices.
Please read the product-specific details in this privacy statement, which provide additional relevant information. This statement applies to the interactions Microsoft has with you and the Microsoft products listed below, as well as other Microsoft products that display this statement.
You can find details about personal data collected from children in the Collection of data from children section. Young people may find it helpful to start with the Privacy for young people page.
For individuals in the United States, please refer to our U.S. State Data Privacy Notice (including notice at collection details) and the Consumer Health Data Privacy Policy for additional information about your rights and the processing of your personal data.
Please see the Enterprise and developer products section of this privacy statement for more information about how we process data from organizations that use our products and services, like businesses and schools. If you use a Microsoft product or a Microsoft account provided by your organization, please see the Products provided by your organization and the Microsoft account sections for more information.
Personal data we collect
Microsoft collects data from users, through your interactions with us and your use of our products. You provide some of this data directly, and we get other data by collecting information about your interactions, use, and experiences with our products. The data we collect depends on the context of your interactions with Microsoft and the choices you make, including your privacy settings and the products and features you use. We also obtain data about users from Microsoft affiliates, subsidiaries, and third parties.
You have choices when it comes to the data you share. When we ask you to provide personal data, you can decline. You can also use in-product controls, including those in your web browser or operating system to limit or prevent certain types of data collection. Many of our products require some personal data to provide you with a service. If you choose not to provide or allow us to collect required data, you cannot use the related product or feature. Likewise, where we need to collect personal data by law or to enter into or carry out a contract with you, and you do not provide the data, we will not be able to enter into or carry out the contract. Where providing the data is optional, and you choose not to share it, features like personalization that use such data will not work for you.
Microsoft collects data from users, through your interactions with us and through your use of our products. We collect data in order to operate, improve, and provide you with the best possible experiences. Some data is provided directly by you, while we collect other data based on how you use our products and communicate with us. The types and amount of data we collect depend on how you interact with Microsoft, your choices, privacy settings, and the features you use, as well as applicable law.
The data we collect can include the following:
Name and contact details. Your first and last name, email address, mailing address, phone number, and other similar contact details.
Account credentials. Information used to access your account, such as username, password, and password hints.
Demographic data. Details about you like your age, gender, country, and language preference.
Payment data. Details needed to process payments, including credit card numbers and security codes.
Subscription and licensing data. Details about your product subscriptions, licenses, and other entitlements.
Interactions. Information about your use of Microsoft products, including features you use, searches, commands given, error reports, and support requests.
- Device and usage data. Data about your device and product features you use, hardware and software details, product performance, and your settings. For example:
- Payment and account history.
- Browsing history.
- Device, connectivity, and configuration data. For example, IP addresses, device identifiers, nearby networks, and other information about the operating systems and other software installed on your device.
- Error reports (“crash dumps”) and performance data. This usually includes software, hardware, and file content details related to an error, and other software on your device.
- Troubleshooting and help data. Data you provide when you contact Microsoft for help. For example, contact or authentication data, the content of your communications with Microsoft, the condition of your device, the products at issue, and other details that help us provide support. Phone conversations or chat sessions with our representatives may be monitored and recorded.
- Bot usage data. Interactions with bots and skills available through Microsoft products, including bots and skills provided by third parties.
- Interests and favorites. Preferences and interests you share (like favorite sports teams, preferred programming languages, or cities for weather or traffic) or that we infer from your activity, such as your activity on sites that use our technology for ads purposes.
- Content consumption. Information about the media content you access through our products like TV, video, music/audio, apps, and games.
- Searches and commands. Search queries and commands you provide in Microsoft products, such as interactions with a chat bot.
- Voice data. Also referred to as “voice clips,” this includes spoken queries commands, or dictation, and may include background sounds. Learn more about how Microsoft uses and protects voice data in its speech recognition technologies.
- Text, inking, and typing data. Data and related information you provide by typing, inking, or using touch input in Microsoft products.
- Images. Images and related data, like picture metadata. For example, we collect the image you provide when you use a Bing image-enabled service or upload an image to Microsoft Copilot.
- Contacts and relationships. Data about your contacts and relationships if you use a product to manage contacts, share information or communicate with others, or improve your productivity.
- Traffic data. Data about your use of Microsoft’s communication services, including whom you’ve contacted and when.
- Social data. Information about your interactions and relationships with others, such as likes, events, and other types of engagement.
- Location data. Data about your device’s location, which may be either precise (typically based on GPS, cell tower, or Wi-Fi hotspot location) or imprecise (for example, inferred from an IP address, or city or postal code in your account profile).
- Biometric data. Unique data about you from specific technical processing related to your physical, physiological, or behavioral characteristics to verify or confirm your identity. For instance, you can use your fingerprint or facial recognition to sign in to your Windows device via Windows Hello (please see the Windows Hello section below for more information). Our collection and use of biometric data depends on the products and features you use and your consent.
- Other input. Data generated from using devices or participating in events, like buttons you press on an XBOX controller or other activity data, or information you provide when registering or attending an in-person event.
Content. Information in files and messages, emails, chats, calls, meetings, photos, documents, and other media you create or share using Microsoft products.
Video and audio recordings at Microsoft locations. Recordings of events and activities at Microsoft buildings, retail spaces, and other locations, which may include your image and voice data.
Feedback and ratings. Information you provide in feedback, surveys, or product reviews.
Product-specific sections below describe data collection practices applicable to use of those products.
We also receive data from Microsoft affiliates, subsidiaries, and third parties. We protect data obtained from third parties according to the practices described in this statement, plus any additional restrictions imposed by the source of the data. These third-party sources vary over time and include:
- Data brokers from which we purchase demographic data and contact information to supplement the data we collect.
- Services that make user-generated content from their service available to others, such as reviews of local businesses or public social media posts.
- Communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks.
- Service providers that help us determine your device’s location.
- Partners with whom we engage in joint marketing activities.
- Developers who create experiences through or for Microsoft products.
- Third parties that deliver experiences through Microsoft products.
- Publicly available sources, such as open public sector, academic, and commercial data sets.
You have choices when it comes to the data you share. When you are asked to provide personal data, you can decline. You can also use web browser, in-product, or operating system controls to limit or prevent certain types of automatic data collection. Many of our products require some personal data to operate and provide you with a service. If you choose not to provide or allow us to collect required data, you cannot use the related product or feature. Likewise, where we need to collect personal data by law or to enter into or carry out a contract with you and you do not provide the data, we will not be able to enter into or carry out the contract. Where providing the data is optional, and you choose not to share personal data, features like personalization that use the data will not work for you.
How we use personal data
Microsoft uses the data we collect to provide you with rich, interactive experiences. Specifically, we use data to:
- Provide our products, which includes updating, securing, and troubleshooting, as well as providing support and making recommendations.
- Improve and develop our products. As part of our efforts to improve and develop our products, we may use your data to develop and train our AI models. Learn more here.
- Advertise and market to you, which includes sending promotional communications, personalized advertising, and presenting relevant offers.
We also use the data to operate our business, which includes analyzing our performance, meeting our legal obligations, developing our workforce, and doing research.
Microsoft uses the data we collect to provide you with rich, interactive experiences. We also use the data to operate our business, which includes analyzing our performance, meeting our legal obligations, developing our workforce, and doing research. Microsoft is committed to protecting the security of your personal data and uses a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. For example, we store personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit highly confidential data (such as credit card number or password) over the internet, we protect it through the use of encryption.
Specifically, we use data to:
- Provide our products. We use data to operate and deliver our products, such as processing files you upload to OneDrive so you can access, edit, and manage them. This also includes:
- Communications. We may use your data to contact you for various reasons, such as to inform you about your subscriptions, tell you when product updates are available, or contact you about your account.
- Personalization. Many products include personalized features and use automated processes to tailor your experience based on your data and inferences based on your activities, interests, and location. You can sync settings across devices via your Microsoft account, and many products allow you to turn off personalized features.
- Product activation. We use data like device and application type, location, and unique identifiers to activate products.
- Transactions. We use data like your payment and contact information to carry out your transactions with us and deliver your purchases.
- Customer support. We use the data to help us troubleshoot and resolve issues, repair devices, investigate security incidents, and to provide, improve, and secure the quality of our products, services, and training. We may use voice data from support calls for authentication and security purposes.
- Security and Safety. We use data to protect the security and safety of our products and customers, such as by detecting malware and malicious activities. We reserve the right to block communications or remove content that violates our terms of use. We use scanning technologies (like hash matching) to help prevent harm to our systems, our users, and others as described in our Code of Conduct, and to help prevent child exploitation. We may share information with the National Center for Missing and Exploited Children (NCMEC) and law enforcement authorities. We also use tools to detect and disrupt the misuse of video-calling capabilities to produce and share child sexual exploitation and abuse imagery by high-risk users. Learn more about our efforts to prevent and detect child exploitation here.
- Providing Age Appropriate Experiences. We use information associated with your Microsoft account to provide more age-appropriate experiences across our services. This may include information you provide, such as your date of birth or settings you choose in your account, information from your use of Microsoft services, such as how you interact with features, content, and products, or information from partners or verification services, such as age range signals received from app stores. We use this information to help us apply age-appropriate protections, settings, and experiences. When we apply age-based protections, we generally apply them across Microsoft services connected to your account so that your experience is consistent. We may share age group information with Microsoft apps and services, as well as third-party apps, so that they can apply appropriate safeguards, tailor experiences, and comply with applicable laws and regulations.
- Troubleshooting and Updates. We use data to troubleshoot and resolve performance issues, develop updates and security patches, and notify users of product updates. This may include using automated systems to detect security and safety issues.
- Product Improvement and Development
- Product improvement. We use data to improve our products, including adding new features and capabilities. For example, we use error reports to improve security features, queries and clicks in Bing to improve search results, and voice data to develop and improve speech recognition accuracy.
- Product development. We use data to develop new products. For example, we use data, often de-identified, to better understand our customers’ computing and productivity needs, and to train and fine-tune AI models, which can shape the development of new products. As part of our efforts to improve and develop our products, we may use your data to develop, train, and fine-tune our AI models, including large language models (LLMs). Learn more here.
- Marketing, Advertising, and Promotions
- Promotional communications. We use data to send you promotional messages. See the How to access and control your personal data section for information on managing your contact data, email subscriptions, and promotional messages.
- Relevant offers. Microsoft uses data to provide you with product information and offers likely to interest you, such as new games based on your activity.
- Advertising. We use data for advertising on Microsoft and third-party properties, sometimes using automated processes to make ads more relevant. Microsoft does not use what you say in emails, human-to-human chat, video calls or voice mail, or your personal files, photos, or documents to target ads to you. See the Advertising section for more details.
- Prize promotions and events. We use your data to administer prize contests and events and to select winners. For example, if you enter into a prize promotion, we may use your data to select a winner and provide the prize to you if you win.
- Business Operations
- Reporting and business operations. We use data to analyze and improve our business, make informed decisions, and report on our business’ performance.
- Protecting rights and property. We use data to detect and prevent fraud, resolve disputes, enforce agreements, and protect our property. For example, we use data to confirm software licenses to reduce piracy and combat fraud. We may use automated processes to detect and prevent activities that violate our rights and the rights of others, such as fraud.
- Legal compliance. We process data to comply with applicable laws. For example, we use the age of our customers to assist us in meeting our obligations to protect children’s privacy.
- Research. With appropriate safeguards for individuals’ rights and freedoms, we use data for research, including AI and machine learning, for public interest and scientific purposes.
We combine data collected from different contexts or obtained from third parties to give you a more seamless, consistent, and personalized experience, to make informed business decisions, and for other legitimate purposes. For example, Microsoft Store uses information about the apps and services you use to make personalized app recommendations. We use technological and procedural safeguards to prevent certain data combinations; for example, we store data collected from unauthenticated users separately from account information that directly identifies you, such as your name, email address, or phone number.
Our processing of personal data involves both automated and manual (human) methods, which often work together. For example, to build, train, and improve the accuracy of our automated systems – such as AI - we manually review some of the results against the underlying data.
Legal bases for processing
We process your personal data with your consent and/or when it’s necessary to provide the products you use, operate our business, meet our contractual and legal obligations, protect the security and safety of our systems and our customers, or pursue our legitimate interests or those of third parties. Our reasons for using your data are described here and in the Reasons we disclose personal data section. Our legal basis for processing may vary depending on how and across what products or services we process your data. When we rely on legitimate interests, we consider and balance those interests against your rights and freedoms and will only process your data if these interests are not outweighed by your own.
Our retention of personal data
Microsoft retains personal data for as long as necessary to provide the products and services you use and to fulfill the transactions you request. We also retain personal data for other legitimate purposes such as operating our business, meeting our contractual and legal obligations, improving and developing our products and services, protecting the safety and security of our systems and customers, and resolving disputes. Because these needs can vary for different data types and the context of our interactions with you or your use of our products, actual retention periods can vary significantly. See relevant product documentation for more information.
Criteria used to determine retention periods include:
- The purposes for which we use the information. For example, when you store a document in OneDrive, we maintain the data until you actively delete it.
- The nature and sensitivity of the information. For example, we maintain a shortened retention period for precise geolocation information.
- Legal, contractual, and other similar obligations we are subject to, including data retention laws, government orders to preserve data relevant to an investigation, or data retained for the purposes of litigation. Conversely, we’ll remove unlawful content where required by law.
Reasons we disclose personal data
Microsoft discloses your personal data with your consent, to complete any transaction or provide any product you have requested or authorized, or as needed to carry out any other purpose described in the How we use personal data section. We also disclose personal data when required by law or to respond to legal process, and to protect customers, safety, security, and Microsoft and its customers’ rights and property. We provide data to Microsoft-controlled affiliates and subsidiaries and to vendors working on our behalf.
We disclose your personal data with your consent, as necessary to complete any transaction or provide any product you have requested or authorized, or as needed to carry out any other purpose described in How we use personal data section. For example, we provide your content to third parties when you tell us to do so, such as when you send an email to a friend or link accounts with another service.
If you use a work or school account or use a Microsoft product provided by an organization you are affiliated with, such as an employer or school, we disclose certain data such as interaction data and diagnostic data to enable your organization to manage the products.
We will disclose payment data to banks and other payment transaction processors and financial services providers to fulfill your purchases with us, and for fraud prevention and credit risk reduction. If you save a payment method (such as a card) to an account used by you and other Microsoft account holders, your purchase receipts may be available to anyone else who uses and has access to the same payment method to make a purchase from Microsoft.
When you permit push notifications for Microsoft products or applications on a non-Windows device, we may send data to an external notification provider to deliver push notifications. Your device’s push notification services are governed by their own service-specific terms and privacy statements.
We also disclose personal data for digital advertising purposes. Please see the Advertising section for more information about how personal data is used for advertising.
In addition, we enable access to personal data among Microsoft-controlled affiliates and subsidiaries, including for the purposes described in this privacy statement. We also provide personal data to vendors or agents working on our behalf for the purposes described in this statement, such as companies we hire to provide customer service support. These companies must comply with our data privacy and security standards and may not use your data for other purposes. We may also disclose personal data as part of corporate transactions such as mergers or asset sales.
Finally, we retain, access, transfer, disclose, and preserve personal data, including your content (like the content of your emails in Outlook.com or files in OneDrive), when we have a good faith belief that it is necessary to do any of the following:
- Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies.
- Protect the safety of our customers, organizations, and the public — for example, to prevent spam; stop attempts to defraud or otherwise cause harm, or to detect, prevent, and combat harmful or illegal behavior including the creation and sharing of harmful or illegal content.
- Operate and maintain the security of our products, including to prevent or stop an attack on our computer systems or networks.
- Protect the rights or property of Microsoft, including enforcing the terms governing the use of our services. If we receive information indicating our services are used to traffic in stolen property, we may refer the matter to law enforcement.
For more information about data we disclose in response to requests from law enforcement and other government agencies, please see our Law Enforcement Requests Report.
Please note that some of our products include links to or otherwise enable you to access products of third parties whose privacy practices differ from those of Microsoft. For example, third party applications or extensions that run on Windows or Edge browser may collect personal data based on their own practices. If you provide personal data to any of those products, your data is governed by their privacy policies.
How to access and control your personal data
You can make choices about the collection and use of your data by Microsoft. You can control your personal data that Microsoft has obtained and exercise your data protection rights by contacting Microsoft or using various tools we provide, such as the Microsoft privacy dashboard.
Not all personal data processed by Microsoft can be accessed or controlled via the tools described in this section. If you want to exercise your data protection rights for your personal data processed by Microsoft that is not available via the tools we provide or directly through the Microsoft products you use, you can always contact Microsoft as described in the How to contact us section or by visiting our privacy support and requests page.
We provide aggregate metrics about user requests to exercise their data protection rights via the Microsoft Privacy Report.
You can make choices about the collection and use of your data by Microsoft. You can control your personal data that Microsoft has obtained, and exercise your data protection rights, by contacting Microsoft or using various tools we provide (described below).
Microsoft provides you with the following data protection rights regardless of your location:
- If Microsoft obtained your consent to use your personal data, you can withdraw that consent at any time.
- You have the right to be informed about the collection and use of your personal data.
- You can request access to, erasure of, and updates to your personal data.
- If you’d like to port your data elsewhere, you can use tools Microsoft provides to do so, or if none are available, you can contact Microsoft for assistance.
- You can also object to or restrict the use of your personal data by Microsoft. For example, you can object at any time to our use of your personal data for direct marketing purposes or where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party.
In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law. If your organization, such as your employer, school, or service provider, provides you with access to and is administering your use of Microsoft products, contact your organization to learn more about how to access and control your personal data.
The tools most useful to access and control your personal data that Microsoft has obtained depends on our interactions with you and your use of our products. The following is a general list of tools we provide to help you control your personal data; specific products may provide additional controls. Please refer to the product specific sections below for more information about how you can access your data through other in-product features.
- Bing. If you are signed into Bing with your Microsoft account, you can view and clear your stored search and chat history on your privacy dashboard. If you are not signed in, you can view and clear stored search history associated with your device in your Bing settings.
- Microsoft Copilot and Microsoft 365 Copilot. If you are signed into Microsoft Copilot or Microsoft 365 Copilot with your Microsoft account, you can view, access, export and delete Copilot activity history from your privacy dashboard. You can also use in-product controls to manage your data within the Microsoft Copilot website or app.
- Microsoft account. You can visit the Microsoft account website if you want to access, edit, or remove your account’s profile and payment information, change your password, add security information or close your account.
- Microsoft privacy dashboard. You can control some of the data Microsoft processes via your Microsoft account on the Microsoft privacy dashboard. For example, you can view and clear the browsing, search, and location data associated with your Microsoft account.
- Microsoft Store. You can access your Microsoft Store profile and account information by visiting Microsoft Store and selecting View account or Order history.
- Microsoft Teams for personal use. You can find out how to export or delete Teams data relating to your personal Microsoft account by visiting this page.
- OneDrive. You can view, download, and delete your files and photos in OneDrive by signing into your OneDrive.
- Outlook.com. You can download your emails in Outlook.com by signing into your account and navigating to your Privacy and data settings.
- Skype. If you wish to access, edit, or remove some profile information for Skype or change your password, sign in to your account. If you wish to export your Skype chat history and files shared on Skype, you can request a copy.
- XBOX. If you use the XBOX network or XBOX.com, you can view or edit your personal data, including billing and account information, privacy settings, and online safety and data sharing preferences by accessing My XBOX on the XBOX console or on XBOX.com.
Not all personal data processed by Microsoft can be accessed or controlled via the tools above. If you want to access or control personal data processed by Microsoft that is not available via the tools above or directly through the Microsoft products you use, you can contact Microsoft at the address in the How to contact us section or by visiting our privacy support and requests page.
Your communications preferences
You can choose whether to receive promotional communications from Microsoft by email, SMS, mail, or phone. To opt out of promotional emails or SMS, follow the directions in the message. For more options – including managing contact info, Microsoft-wide contact preferences, email subscriptions, and sharing info with partners – sign in to your personal Microsoft account, and visit your communication permissions page. If you don't have a Microsoft account, you can manage your Microsoft email contact preferences by using this web form. These choices do not apply to mandatory service communications or other informational messages with their own unsubscribe method.
Your advertising choices
To opt out of receiving personalized advertising from Microsoft (including Xandr) visit our Personalized ads and offers page. You can also see our third party ad partners and opt out of data sharing for personalized ads at our Third-party ad settings page. When you’re logged into your Microsoft account, your opt out choice will be associated with your account and applied across devices whenever you are signed in. If you are not signed in and choose to opt out, your preference is stored in a browser-specific cookie on your device, valid for five years; if you delete cookies, you must opt out again.
For Microsoft-controlled ads in Windows apps, use the opt-out linked to your personal Microsoft account, or turn off the advertising ID in Windows settings to opt out of personalized advertising.
Data used for personalized advertising is also used for other required purposes, such as product delivery, analytics, and fraud detection. You will still see ads even if you opt out of personalized ads, but they may be less relevant to you.
You can opt out of personalized advertising from third-party partners by visiting their sites. Please see our Advertising section below for more information.
Browser-based controls
When you use a browser, you can control your personal data using certain features. For example:
- Cookie controls. You can control the data stored by cookies and withdraw consent to cookies by using the browser-based cookie controls described in the Cookies section.
- Tracking protections. You can control the data third-party sites can collect about you using Tracking Protection in Microsoft Edge. This feature will block third-party content, including cookies, from any site that is listed in a Tracking Protection List you add.
- Universal Opt-Outs. Microsoft receives and responds to the Global Privacy Control (GPC) browser opt-out signal in certain jurisdictions. Microsoft will turn off sharing your data with third parties for personalized ads and turn off the “Share my data with third parties for personalized ads” toggle if we receive a GPC signal from you when you visit our sites.
Cookies and similar technologies
We use cookies and similar technologies, such as web beacons and pixels, for storing and honoring your preferences and settings, enabling you to sign in, providing personalized advertising, combating fraud, analyzing how our products perform, and fulfilling other legitimate purposes.
Our websites may include web beacons, cookies, or similar technologies from Microsoft affiliates and partners as well as third parties, such as service providers acting on our behalf.
Third party cookies may be used for required purposes to provide the website or service, to show you ads and content based on your social media profiles and activities on our websites, to better understand how you and others use our websites so that we can make them better and so the third parties can improve their own products and services, and to show you ads that are relevant to you.
You can control the data collected by cookies, web beacons, and similar technologies. For example, you can use controls in your internet browser to limit how the websites you visit are able to use or to clear or to block cookies. Where required, we obtain your consent prior to placing or using optional cookies that are not (i) strictly necessary to provide the website or service; or (ii) for the purpose of facilitating a communication. Where consent is required, you may withdraw consent to optional cookies by clicking “Manage cookies” in the footer of the website.
We use cookies and similar technologies to store and honor your preferences and settings, enable you to sign-in, provide personalized advertising, combat fraud, analyze how our products perform, and fulfill other legitimate purposes described below. Some cookies are placed by third parties acting on our behalf. Microsoft apps use additional identifiers, such as the Advertising ID in Windows, for similar purposes, and many of our websites and applications also contain web beacons or other similar technologies, as described below.
How we use cookies and similar technologies
- Preferences and settings. We use cookies to store and save your choices – like language settings or your ad preferences – so you don’t need to set them again.
- Sign-in and authentication. We use cookies to verify your identity and keep you signed in securely. When you sign in with a Microsoft account, we store a unique ID number and the time you signed in in an encrypted cookie on your device, so you don’t have to repeatedly sign in.
- Security. We use cookies to protect our products and detect fraud and abuse.
- Storing information. We use cookies to remember information you provide, such as items in your shopping cart.
- Social media. Some of our websites include social media cookies, which may let you share content with social media services if you’re signed in with them.
- Feedback. We use cookies so you can give feedback on our websites.
- Personalized advertising. We use cookies to personalize ads based on your activity. You can opt out as described in the How to access and control your personal data section of this privacy statement. We also use web beacons and similar technologies to understand which Microsoft ads displayed on third-party websites and digital platforms drive visitors to our sites and apps. These tools also help us deliver ads on external sites and platforms. See below for more information about web beacons and analytics services.
- Ad delivery and reporting. We use cookies to record ad views and clicks, such as which ads you have seen. This helps us, for example, avoid showing the same ad repeatedly.
- Analytics. We use cookies to gather usage and performance data, such as visitor counts and other statistics about our websites and products.
- Performance. We use cookies to help us understand and improve how our products and websites work, like gathering data to help with load balancing and uptime.
Where required, we obtain your consent prior to placing or using optional cookies. Please see the How to control cookies section below for more information.
Some of the cookies we commonly use and some of the purposes they may be used for are listed below. This list is not exhaustive, but it is intended to illustrate the primary purposes for which we typically set cookies. If you visit one of our websites, the site will set some or all of the following cookies:
- MSCC. Contains user choices for most Microsoft properties.
- MUID, MC1, MSFPC, and ai_user. Identifies unique web browsers visiting Microsoft sites. These cookies are used for necessary operational purposes. With consent, these cookies may also be used for advertising.
- ESTSAUTH, ESTSAUTHLIGHT, ESTSAUTHPERSISTENT. Helps to authenticate you when you sign in with your Microsoft account.
- MS0. Identifies a specific session.
- NAP. Contains an encrypted version of your country, postal code, age, gender, language and occupation, if known, based on your Microsoft account profile.
- MR. Resets or refreshes the MUID cookie.
- x-ms-gateway-slice, ARRAffinity, ARRAffinitySameSite, ASLBSA, and ASLBSACORS. Identifies a gateway for load balancing.
- TOptOut. Records your decision not to receive personalized advertising delivered by Microsoft. Where required, we place this cookie by default and remove it when you consent to personalized advertising.
- ApplicationGatewayAffinity and ApplicationGatewayAffinityCORS. Used for load balancing purposes and to ensure requests for a user session are handled by the same server.
- esctx, _RequestVerificationToken, .AspNetCore.Correlation, and .AspNetCore.Nonce. Assist with the security of your website visit and stability of the services provided to you by helping prevent fraud and malicious attacks.
We may also use the cookies of other Microsoft affiliates, companies, and partners, such as LinkedIn and Xandr.
Third-Party Cookies
In addition to the cookies Microsoft sets when you visit our websites, we also use cookies from third parties to enhance the services on our sites. Some third parties can also set cookies when you visit Microsoft sites. For example, when we hire companies to perform services on our behalf, like site analytics, and when companies deliver content on our sites, like videos, news, or ads.
These companies use the data they process in accordance with their privacy policies, which may enable them to collect and combine information about your activities across websites, apps, or online services.
The following types of third-party cookies may be used, depending on the context, service or product, as well as your settings and permissions:
- Social media cookies. These cookies help us and third parties show you ads and content tailored to your interests, based on your social media profiles and activity on our websites.
- Analytics cookies. Analytics cookies from third parties collect information on how you use our websites to help us improve them and allow third parties to develop and improve their own products. They may also be used for advertising purposes.
- Advertising cookies. Advertising cookies record which ads you’ve seen, which ads you’ve clicked, or the purchases you’ve made after clicking. They show you ads relevant to you, like ads based on your social media interests and website browsing history.
- Required cookies. Required cookies enable core website functions, such as login, preferences, shopping carts, performance, and security.
For a list of the third parties that set cookies on our websites, please visit our third party cookie inventory. On some of our websites, a list of third parties is available directly on the site and may not be included in our third party cookie inventory. Please consult the third party websites or privacy notices for more information on their privacy practices with respect to their cookies that may be set on our websites.
How to control cookies
Most web browsers automatically accept cookies but provide controls that allow you to block or delete them. For example, in Microsoft Edge, you can block or delete cookies by selecting Settings > Privacy and services > Clear Browsing data > Cookies and other site data. For more information about how to view, block, or delete your cookies in Microsoft Edge, please see our Manage cookies in Microsoft Edge page. If you use a different browser, refer to that browser’s instructions. If you choose to block cookies, you cannot sign in or use some of those features, and preferences that are dependent on cookies will be lost. If you delete your cookies, any settings and preferences controlled by those cookies, including advertising preferences, are deleted and will need to be recreated.
Where required, we obtain your consent before placing or using optional cookies that are not (i) strictly necessary to provide the website; or (ii) for the purpose of facilitating a communication. We separate these optional cookies by purpose, including advertising, analytics, and social media purposes. Where consent is required, you can adjust your choices by clicking “Manage cookies” in the footer of the website or through the settings made available on the website. Certain features of Microsoft products depend on cookies.
Additional privacy controls that can impact cookies, including the tracking protections feature of Microsoft browsers, are described in the How to access and control your personal data section of this privacy statement.
Web beacons and analytics services
Some Microsoft webpages use electronic tags called web beacons to deliver cookies, count visitors, and deliver products. We also use web beacons or similar technologies in our communications to determine whether you open and act on them.
We sometimes place our web beacons on other companies’ websites or ads to help us understand how interactions with Microsoft advertisements lead to actions, such as purchases, or to learn about your activity on partner sites in connection with Microsoft products or services.
Microsoft products often include web beacons or similar technologies from third-party analytics providers. These providers help us compile statistics about our campaigns and operations. They may set or read their own cookies or identifiers on your device to collect information about your online activities across websites and apps. However, we prohibit these providers from using web beacons on our sites to collect or access information that directly identifies you, such as your name or email address. You can opt out of data collection or use by some of these analytics providers by visiting any of the following sites: Adjust, AppsFlyer, Clicktale, Flurry Analytics, Google Analytics (requires you to install a browser add-on), Kissmetrics, Mixpanel, Nielsen, Acuity Ads, WebTrends, or Optimizely.
Other similar technologies
Our products can also use other similar technologies to store and read data files on your computer. This is typically done to maintain your preferences or to improve speed and performance by storing certain files locally. These technologies can also store a unique identifier for your computer, which can then track behavior.
Microsoft account
A Microsoft account lets you sign in to Microsoft products and certain Microsoft partner products. Personal data associated with your Microsoft account includes credentials, contact and payment data, device and usage data and activity-related information. Signing in to your Microsoft account enables personalization and consistent experiences across products and devices, and enables cloud storage use, payments with stored payment methods, and other features.
If you sign into a service offered by a third party with your Microsoft account, Microsoft shares account data with that third party according to the third party’s privacy policy.
A Microsoft account is a personal account that lets you sign into Microsoft products and those of select partners. This account includes personal data such as your credentials, name and contact data, payment data, device and usage data, contacts, information about your activities, and interests and favorites. Signing into your Microsoft account helps personalize your experience, provides consistent experiences across products and devices, enables cloud storage, lets you make payments with stored payment methods, and enables other features.
A work or school account, also known as a Microsoft Entra ID account, is an account that is provided and managed by your organization, such as your employer or school. You can use it to sign in to Microsoft products and third-party products that your organization provides. If you sign into Microsoft products with a work or school account, please note:
- Your organization controls your account and can access and process your data, including your communications, files, and content in products you use with your account.
- Your use of these products is subject to your organization’s policies. Review your organization’s privacy and security policies before using your work or school account for personal use.
- If you lose access to your work or school account (for example, if you change employers), you may also lose access to products or content purchased or accessed with that account.
- If you use a work or school email address to create a Microsoft account, your organization may access your data associated with your Microsoft account.
- Microsoft is not responsible for your organization’s privacy or security practices, which may differ from our own standards.
- Direct any privacy questions or requests (such as to access, correct, or delete your data) to your administrator. See the Products provided by your organization – Notice to end users section for more information about your rights.
Contact your organization if you’re unsure if your account is a work or school account.
A third-party account is a Microsoft account that you or your service provider (such as a cable or internet service provider) create that is tied to your email address with your service provider’s domain. Your service provider has control over your account, including the ability to access or delete your account. You should carefully review the terms the third party provided to you to help you understand what the service provider can do with your account and data.
Your Microsoft account. The data associated with your Microsoft account, and how that data is used, depends on how you use the account.
- Creating your Microsoft account. When you create a Microsoft account, you'll be asked to provide certain personal data and we'll assign you a unique ID. For some products, like those involving payments, a real name is required, but many products can be used without it. Data such as your display name, email address, and phone number can help others find you on Microsoft products (for example, on Microsoft Teams for personal use). In some cases, you may need to switch to a personal email address to continue accessing consumer-oriented products like the XBOX network.
- Signing in to your Microsoft account. When you sign in to your Microsoft account, we log details like the date and time, product accessed, sign-in name, account and device identifiers, IP address, and operating system and browser information.
- Signing in to Microsoft products. Signing in to Microsoft products enables improved personalization, provides consistent experiences across products, permits cloud storage access, and lets you make payments using information stored in your account, along with other settings and features. Information saved to your account may be available across Microsoft products. If you add your account to a Windows device (version 8 or higher), Windows will automatically sign you in to Microsoft products on that device. When signed in, some products will show your name or username and profile photo (if you have one) in Microsoft products, communications, and public posts. Learn more about your Microsoft account, your data, and your choices.
- Signing in to third-party products. If you sign in to a third-party product or make payments to third-party merchants using your Microsoft account, Microsoft shares data with the third party as needed, including your account version number and whether your account has been deactivated. Third parties may use or share your data per their own privacy policies. You should carefully review the privacy policies for each product or merchant you use to understand how your data will be handled.
Collection of data from children
Microsoft offers many products and services that children and teens can use, though child and teen users will not always have access to all the features and services that adult users do. Some of these features will be off by default or unavailable to younger users. When a child is under 13-or a higher age if required in their region-the child will need consent from their parent or guardian to create a Microsoft account. Parents can change or revoke consent at any time.
Microsoft offers Family Safety tools that allow parents to connect their children’s accounts to a family group. Microsoft accounts created using parental consent are automatically added to the parent’s family group. As the organizer of a Microsoft family group, the parent or guardian can manage their child’s information and settings on their Family Safety page and view and delete a child’s data on their privacy dashboard. Parents of XBOX users have additional controls through the XBOX Family Settings app.
For users under the age of 13 or as specified by law in their jurisdiction, certain Microsoft products and services will either block users under that age or require parental or guardian consent or authorization before use, including when creating an account. See the How we use personal data section for more information about how we provide age appropriate experiences.
When we receive parental consent or authorization, the child's account is treated much like any other account, and the child will be able to use Microsoft services such as Outlook, Bing, Copilot, and XBOX, and communicate or share data with other users. We will not knowingly ask children under the age of consent to provide more data than is necessary to provide the product.
As mentioned in the Advertising section, we do not deliver personalized advertising to children whose birthdate in their Microsoft account identifies them as under 18 years of age. For more details, see the Microsoft account section of this privacy statement and Learn more about parental consent and Microsoft child accounts.
Parents or guardians (“parents”) can change or revoke consent at any time. As the organizer of a Microsoft family group, parents can manage their child’s information and settings on the Family Safety page and view or delete a child’s data on the privacy dashboard. Accounts created with parental consent are automatically added to consenting adult’s family group. For child accounts that don’t need parental consent to be created, parents can add the child account to their family group after account creation. See the Microsoft Family Safety section for more information.
Accessing and deleting child data. For Microsoft products and services that require parental consent, parents can view and delete certain data about their child, such as browsing history, search history, location activity, and app usage by signing into the parent’s privacy dashboard.
Some Microsoft products, including XBOX, also have their own in-product controls. Please note that a parent’s ability to access and/or delete their child’s personal information may vary depending on the laws where they’re located. For more details on controlling data within Microsoft products, visit our Privacy Frequently Asked Questions (FAQs).
If your child’s account is not part of your Microsoft Family group and you do not have access to their activity on your privacy dashboard, submit a request related to your child’s data through the privacy support form. The privacy team will ask for account verification before fulfilling the request. We process authenticated deletion requests within 30 days of receipt.
To delete all your child’s personal information, request deletion of the child’s account using the