Windows 11 privacy settings that actually do something

Guide · 6 min read

Search "windows privacy tweaks" and you'll find hundreds of registry keys copy-pasted between blogs, most of them stale since Windows 8. Here's what's current, documented, and verifiable in Settings → Privacy & security on Windows 11.

Diagnostic data level

Under Diagnostics & feedback, Windows 11 offers Required vs. Optional diagnostic data. Setting this to Required (and turning off "tailored experiences") is the single setting with the most actual effect on what leaves the machine — it's the one Microsoft's own privacy documentation points to first.

Advertising ID

The per-user advertising ID (Settings → Privacy & security → General) is what lets apps build an ad profile tied to your account across apps. Turning it off is immediate and well documented, and — unlike a lot of tweaks — you can watch it take effect in Settings itself.

Activity history

Settings → Privacy & security → Activity history controls whether your app/document activity is stored and, if you're signed in with a Microsoft account, synced. Off means it isn't collected locally or sent.

What doesn't do anything anymore

• Most "disable telemetry via DiagTrack service" guides — the service restarts itself on many current builds, and the setting above supersedes it.
• Hosts-file blocks for Microsoft telemetry domains — largely defeated by newer builds using different endpoints; treat it as theater, not a control.
• Random HKLM keys from decade-old "Windows 10 privacy" lists that predate the Settings app options that replaced them.

Where this crosses into "don't"

None of the settings above touch licensing, activation, or security services — they're consumer privacy toggles Microsoft ships and documents. If a guide tells you to edit activation-related registry keys "for privacy," that's not what it's actually doing.