(last updated October 2012)
view the privacy statement highlights
Note that this page is a supplement to the Microsoft Online Privacy Statement. In order to understand the data collection and use practices relevant for a particular site or service, you should read both the Microsoft Online Privacy Statement and any applicable supplement.
This supplement contains additional information related to the following Windows Live services:
|Windows Live Toolbar|
|Windows Live Calendar and Contacts|
|Windows Live Mobile|
|Windows Live Admin Center and Managed Accounts|
|Windows Live OneCare Family Safety|
|Office Web Applications|
At Microsoft, we work hard to protect your privacy, while delivering products that bring you the performance, power, and convenience that you want in your personal computing. This supplement describes many of the data collection and use practices of the following apps, which run on Windows 8 devices and are referred to as the "Windows apps":
Calendar. The Calendar app displays appointments and other information from calendars associated with your online accounts.
Mail. The Mail app permits you to access email from one or more email accounts.
Messaging. The Messaging app allows you to send and receive instant messages using your instant messaging accounts.
People. The People app aggregates contact information from your online accounts.
SkyDrive. The SkyDrive app permits you to store and access content online on Microsoft’s SkyDrive service.
Photos. The Photos app permits you to access photos from your SkyDrive photo library, from the Pictures library on your Windows 8 device, from any photo-capable device that is physically connected to your Windows 8 device, and from any services that you have connected to your Microsoft account.
The Calendar, Mail, Messaging and People apps are also known collectively as the "Communications apps."
Signing into the apps
You may sign into the SkyDrive app and the Photos app with your Microsoft account, and you may sign into the Communications apps with your Microsoft account or another online account. If you sign into one of the Communications apps with an account, you will be signed into all of the Communications apps with that account, and your online content will be downloaded from the account to your device. For example, if you sign into the Mail app with your Microsoft account, your Hotmail email will be downloaded to the Mail app, and since you will also be signed into the other Communications apps with your Microsoft account, your contacts will be downloaded to the People app and your Hotmail calendar will be downloaded to the Calendar app. When you sign into the Communications apps with a non-Microsoft account, your online content from the non-Microsoft account is downloaded to your device without sending the content to Microsoft.
Microsoft is not responsible for content originating from non-Microsoft services or for information that you share with or send to non-Microsoft services. If you use a third-party service, its use of your information is subject to the third party’s privacy practices. Please refer to the respective privacy policies for those services for more information.
When you sign into the apps with your Microsoft account, certain information is sent to Microsoft—see the Microsoft account privacy statement for more information.
Signing into Windows 8 with a Microsoft account
Windows 8 provides users with the ability to sign into Windows 8 using a Microsoft account in order to sync certain settings and have personalized experiences across devices running Windows 8. If you sign into your Windows 8 device with your Microsoft account, you will automatically be signed into the Windows apps with that Microsoft account. For more information on signing into Windows 8 with your Microsoft account, see the Windows 8 privacy statement.
Signing into the apps when you sign in to Windows 8 with a local account
If you sign into Windows 8 with a local account, rather than a Microsoft account, and you sign into the Windows apps with an online account (such as your Microsoft account), we will keep you signed into the apps with that online account each time you log into Windows 8 unless you "remove" the account by selecting Settings -> Accounts -> [account name] and tapping or clicking Remove account. We do this so that the next time you access your device, content from your online account will automatically be synced to the Communications apps on your device for your convenience and you will not have to reenter your username and password for the online account.
Syncing content with the apps
When you sign into the Communications apps with an account, content from the account is kept in sync with your device at intervals you can specify; for example, email messages can be downloaded to your device as they arrive, every 15 minutes, every 30 minutes, hourly, or when you check manually.
You can choose what content to sync with your device by selecting Settings -> Accounts -> [account name] and selecting or deselecting the content you want to sync.
Accounts you have connected to your Microsoft account
If you have connected your Microsoft account to an account provided by a non-Microsoft service, such as Facebook, Twitter, or LinkedIn, signing into the Windows apps with your Microsoft account also signs you into the non-Microsoft account, and information from the non-Microsoft account will similarly be downloaded to your device and displayed in the apps.
Windows Custom Experience Improvement Program (CEIP)
If you choose to participate in Windows CEIP, Microsoft collects basic information, including information about your computer, about how you use the Windows apps, and about how each app is set up and performing. CEIP reports are sent to Microsoft to help improve the features our customers use most often and create solutions to common problems.
If you sign into the Windows apps with your Microsoft account, and if you decide to send information about those apps to Microsoft by choosing to participate in Windows CEIP, that information will be sent and stored for a limited period of time with a unique identifier that is generated when you create your Microsoft account. This unique identifier does not contain any personal information and is not used to identify or contact you; it is used to aggregate CEIP data you send to Microsoft across multiple devices and to help us determine how widespread feedback is and how to prioritize it.
If you choose the express settings during Windows 8 setup, you turn on Windows CEIP. For more information on Windows CEIP, including how to turn it on or off, see the Windows privacy supplement.
Quality of Service (QoS) Data Collection
The Windows apps permit you to connect to online services to enhance your experience. In order to operate and connect you to online services, we automatically upload QoS information about your computer about how you use the Windows apps and about how the apps are set up and performing. The QoS information collected is limited to that which is necessary to operate and/or connect you to online services. For example, it may include how certain commands are invoked, the amount of time an app takes to perform certain functions, and whether your device syncs properly with an online service. If you sign in to the Windows apps with your Microsoft account, the QoS information collected will be sent and stored for a limited period of time with the unique identifier described in the preceding section (i.e., the unique identifier that is generated when you create your Microsoft account) in order to help us determine how widespread feedback is and how to prioritize it.
Notifications and Tile updates
When you sign into the Windows apps with an online account, they will automatically deliver periodic or real-time information to you that will be displayed as updates to the apps’ tiles on the Start screen. For example, you may see the number of unread emails in the Mail app, the number of unread instant messages in the Messenger app, or an upcoming appointment in the Calendar app. You may also select a photo or shuffle a series of photos to display on the Photos app’s tile; doing so saves a copy of the photo or photos on your device. If you delete the original photo or disconnect your Microsoft account from the service where the photo resides, the Photos app’s tile will continue to display the saved copy for a short time unless you manually delete the copy or turn off the shuffle feature. Furthermore, the Communications apps will automatically deliver periodic or real-time information to you that will be displayed briefly as notifications in the corner of the screen. Apps used as lock screen apps can also show updates and notifications on top of the lock screen.
For more information on Notifications and Tile updates in Windows 8, including how to clear updates being displayed on your Start screen and how to turn notifications off, see the Windows privacy statement.
Additional information about the Windows apps is provided below.
If you do not wish to view information from a certain calendar in the Calendar app, you may hide that calendar by selecting Settings -> Options and changing the Show option for that calendar to Hide. This will cause information from that calendar to be hidden from view in the Calendar app, on the Calendar app’s tile, in notifications and on the lock screen.
If you are signed into Messaging on more than one device, all instant messages that you send and receive via Messaging will be displayed simultaneously on each respective device. For example, if you are signed into Messaging on your work PC, your home PC and your Windows Phone, the instant messages that you send and receive in Messaging will be displayed on all three devices in real time. To sign out of Messaging on a particular device, select Settings -> Options and set Turn on Messaging to Off.
Items that you upload to SkyDrive will inherit the permissions of the folder into which you upload them. In other words, if you upload a file into a public folder, the file will be accessible to anyone with access to that folder regardless of whether you set a more restrictive permission for the file itself. To manage permissions for your content on SkyDrive, sign in to your Microsoft account at www.live.com.
The Photos app permits you to view photos from your SkyDrive photo library, from the Pictures library on your Windows 8 device, from any photo-capable device that is physically connected to your Windows 8 device, and from any services that you have connected to your Microsoft account. The Photos app connects to all of these services when you launch it. If you do not wish to view photos from certain sources in the Photos app, select Settings -> Settings and set the corresponding source to Off.
Please see the Search Privacy Supplement for information about when using Search.
While you have Windows Live Toolbar installed, please note that new versions of the Toolbar may automatically be downloaded and installed on your computer. This keeps your Toolbar up-to-date and lets you take advantage of new features as soon as they are available.
Windows Live Toolbar users will be given a choice to allow Microsoft to collect additional information about your computer hardware, how you use the toolbar, the full URLs and your interactions with the pages you visit and your actions while reviewing search results. Such actions may include which search results are visited and how much time is spent on a particular search results page. None of this information is used to identify you and is used only in the aggregate to help improve this and other Microsoft products and services. You can change your choice at any time on the Toolbar options screen.
The Windows Live Toolbar also includes an optional feature that can automatically fill out forms on Web sites with information such as your address, passwords, and credit card information so that you do not have to repeatedly type the same information or remember multiple passwords. This information is encrypted and saved on your computer; it is not sent to Microsoft. The Toolbar will prompt you to create a single "form fill password." You must enter the form fill password every time you wish to automatically enter a stored credit card number and once per browser session to automatically enter a stored passwords.
The Microsoft Phishing Filter Add-in for the Windows Live Toolbar can warn you if the Web site you are visiting might be impersonating a trusted Web site. Phishing Filter does this by first checking the address of the Web site you are visiting against a list of Web site addresses stored on your computer that have been reported to Microsoft as legitimate ("legitimate list"). Addresses not on the legitimate list will be sent to Microsoft and checked against a frequently updated list of Web sites that have been reported to Microsoft as phishing, suspicious, or legitimate Web sites. Along with these addresses, some standard information from your computer such as IP address, browser type, and Phishing Filter version number are sent to Microsoft.
To help protect your privacy, the address information sent to Microsoft by the Phishing Filter is encrypted using SSL and limited to the domain and path of the web site. Other information that may be associated with the address, such as search terms, data you entered in forms, or cookies, will not be sent. For example, if you visited the Search Web site at http://search.live.com and entered "MySecret" as the search term, instead of sending the full address "http://search.live.com/results.aspx?q=MySecret&FORM=QBHP", Phishing Filter would remove the search term and only send "http://search.live.com/results.aspx".
Statistics about your usage of Phishing Filter will also be sent to Microsoft such as the time and total number of Web sites browsed since an address was sent to Microsoft for analysis. This information, along with the information described above, will be used to analyze the performance and improve the quality of the Phishing Filter service. Microsoft will not use the information to identify you. Phishing Filter in the Windows Live Toolbar can be turned off by removing the Toolbar Phishing Filter Add-in from the Phishing Filter tab in toolbar options, or by uninstalling it in Windows XP through add/remove programs.
When you use Windows Live Calendar and create contacts, the information you enter there about yourself and others is stored. This information may include: calendar appointments, e-mail address, first and last name, nickname, home address, work address, phone number, and birthday. You may view, edit, and share that information with your friends and acquaintances.
There are two ways your calendar data may be viewed by others: 1-to-1 sharing and public access. For 1-to-1 calendar sharing, with side-by-side appointment views, both you and your friend must be subscribers to a Windows Live or MSN service. In this case, your calendar is shared only with specific contacts; those contacts must authenticate with a Microsoft Passport and you must give permission to those contacts to view your calendar. For public calendar access, any person with access to the Internet may view your calendar if you decide to "publish" your calendar to calendar.live.com/your e-mail address.
When you sign up for Windows Live Mobile for your mobile phone or pager, Microsoft collects your Passport member name (e-mail address), mobile alert preferences, and other information about your mobile device necessary to provide the service. Microsoft uses this information to operate the Windows Live Mobile service and provide customer support to users when they need help. If you signed up for Windows Live Mobile at a co-branded site, your carrier will also receive your personal information. You may visit the Windows Live Mobile Web site at any time to view or change your personal information.
Windows Live Custom Domains allows you to create and manage accounts within the domain(s) you own. To manage the accounts you create within your domain, go to http://admincenter.live.com and sign in.
If you do not already own a domain and wish to create one, Microsoft has partnered with several accredited Registrars which you can use to register your selected domain name(s). The Registrar you choose will ask you to supply registrant and administrative contact information such as name, address, telephone number, and e-mail address. As required by the Internet's governing organization (ICANN), the Registrar you use to register your domain name will make this contact information available in a public registry. To review the data in this registry, you can visit http://www.geektools.com/whois.php.
If you have an e-mail account on a domain that is managed through Windows Live Custom Domains, please be aware that the administrator (owner) of the domain can manage your account – including the ability to delete your account and associated e-mail inbox at any time, reset your password, or add your e-mail address to distribution lists.
Windows Live OneCare Family Safety (“Family Safety”) is a parental controls service that helps parents manage what their children see online and the contacts their children can communicate with when using Windows Live Messenger, Windows Live Hotmail, and Windows Live Spaces.
Family Safety includes:
Content Filtering – Parents can specify Web sites their children can view, both by content-category and by URL.
Activity Reporting – Parents can choose whether to see reports (online or via e-mail) of the Web sites their children have visited and attempted to visit.
Application Restrictions – Parents can choose whether their children can use certain online services.
Contact Management – If their children are allowed to use Windows Live communications services such as Windows Live Messenger, Windows Live Hotmail, and Windows Live Spaces, parents can select the contacts the children are allowed to communicate with via those services.
Family Safety includes an administration Web site where parents can configure Family Safety settings and view activity reports. To use Content Filtering features for a computer that a child uses, a parent must install Content Filtering software on the computer and must ensure the child uses Windows Live ID accounts managed through Family Safety. The Content Filtering software is an optional part of the Windows Live Client Suite.
When browsing the Web, Family Safety generates periodic updates to an activity report and delivers it to the Family Safety Web site for parents to review.
Children can request access to blocked Web sites or contacts from their parents. Requests are stored for approximately 30 days or until parents approve or deny the request, whichever comes first.
When a child’s account is removed from Family Safety, activity reports will no longer be delivered. Deletion of activity report information takes approximately 30 days from the date of account removal.
Family Safety does not share information about children’s online activities with other products or services. Parents and their children will receive e-mails as part of the normal operation of the service (e.g., notifications of pending requests for access).
Office Web Applications allows you to view and edit supported Microsoft Office documents in your browser. Some Office features are not available in Office Web Applications. For example, there may be data in documents that you cannot view or edit. You can use other applications, such as Microsoft Office, to view and edit additional data.
To learn more about the Microsoft Office privacy, you can visit Privacy Statement Highlights for the Microsoft Office System.