Provision record
Microsoft · Microsoft Privacy Statement (Legacy) · View original document ↗

Windows Recall data stored locally and never transmitted without user action

High confidence Common · 268 of 343 platforms

Key Facts · in the document’s own words

Where does Microsoft store data captured by Windows Recall?
“Recall securely stores all captured data—including personal data like snapshots, metadata, processing results, and user queries—locally on your Copilot+ PC... This information is never transmitted off your device unless you take action...”
Version CA-V-006591, captured Sept. 11, 2026 · live source ↗
Our reading, not the document’s words
Microsoft stores all data captured by Windows Recall—including snapshots, metadata, processing results, and user queries—locally on the user's Copilot+ PC and does not transmit it off the device unless the user takes action.
Stay ahead of the changes
Track Microsoft and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Microsoft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Generated by a model from the captured document; not read by a person

Recall captures a continuous record of on-screen activity; the local-only storage commitment and the user-action requirement before any transmission are the primary privacy safeguards limiting exposure of that highly sensitive data.

⚠

Interpretive note: The clause does not define what constitutes 'user action' that would permit transmission, leaving the scope of that exception unspecified.

Recent Activity

This document changed recently

Medium Sep 10, 2026

The updated privacy statement clarifies that Microsoft Copilot collects data about your interactions with Microsoft websites and apps, in addition to previously disclosed device and product usage data. The policy now states that Copilot may use your conversation history, including saved memories, to personalize your experience across Microsoft products such as Bing, Edge, and MSN. You can manage your memories and control personalization features using the settings in Microsoft Copilot at any time.

View change record →

Consumer impact (what this means for users)

Generated by a model from the captured document; not read by a person

Readers using a Copilot+ PC with Recall can rely on the fact that their captured snapshots, queries, and related data remain on their device and are not sent to Microsoft or any other party unless the user initiates that transfer.

How other platforms handle this

Ford

The personal information we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or vendors maintain facilities.

Target

ALPR Information is stored for approximately 30 days before it is permanently deleted unless the information is retained for investigative or legal purposes.

Patreon

Patreon stores your personal data until it is no longer necessary to provide our services, or until you ask us to delete it.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Recall securely stores all captured data—including personal data like snapshots, metadata, processing results, and user queries—locally on your Copilot+ PC... This information is never transmitted off your device unless you take action...

Excerpt from Microsoft's Privacy Statement (Legacy)

Provision details

Document information
Document
Microsoft Privacy Statement (Legacy)
Entity
Microsoft
Tracking information
First captured by ConductAtlas
March 5, 2026
Text quoted from version
CA-V-006591, captured Sept. 11, 2026
Record ID
CA-P-016872
Document ID
CA-D-000001
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006591)
026452c25b8988052a3e63ae41cac2a0ff195edf3a413aa2a16c9ce515232257
Analysis generated
July 9, 2026 17:07 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006591, captured Sept. 11, 2026 (checked Oct. 5, 2026)
Citation Record
Entity: Microsoft
Document: Microsoft Privacy Statement (Legacy)
Record ID: CA-P-016872
Version: CA-V-006591
Captured: 2026-09-11 00:08:37 UTC
SHA-256: 026452c25b898805…
URL: https://conductatlas.com/platform/microsoft/microsoft-privacy-statement-legacy/provision/CA-P-016872/windows-recall-data-stored-locally-and-never-transmitted-without-user-action/
Accessed: Nov. 3, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Microsoft's Windows Recall data stored locally and never transmitted without user action clause do?

Recall captures a continuous record of on-screen activity; the local-only storage commitment and the user-action requirement before any transmission are the primary privacy safeguards limiting exposure of that highly sensitive data.

How does this clause affect you?

Readers using a Copilot+ PC with Recall can rely on the fact that their captured snapshots, queries, and related data remain on their device and are not sent to Microsoft or any other party unless the user initiates that transfer.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 268 platforms. See the full comparison.

Is ConductAtlas affiliated with Microsoft?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Microsoft.