Microsoft collects a very wide range of data about you including your name, payment details, location, files, messages, voice recordings, and behavioral inferences — both directly from you and from third parties.
Consumer impact (what this means for users)
Xbox users' data collection extends far beyond gameplay — it includes voice recordings, location data, payment information, and behavioral inferences drawn from all your Microsoft service interactions, creating a comprehensive personal profile across Microsoft's entire product ecosystem.
What you can do
⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
Export Your Data
Sign in to your Microsoft account at account.microsoft.com/privacy, navigate to 'Privacy dashboard', and select 'Download your data' to export a copy of the personal data Microsoft holds about you, including Xbox activity, browsing history, and voice data.
Cross-platform context
See how other platforms handle Personal Data We Collect — Scope and Categories and similar clauses.
The breadth of data Microsoft collects across Xbox and all its services — including voice recordings, location, files, and inferences about your personality and preferences — creates a comprehensive personal profile that goes well beyond what many consumers would expect.
View original clause language
Microsoft collects data from you, through our interactions with you, and through our products. You provide some of this data directly, and we get some of it by collecting data about your interactions, use, and experiences with our products. The data we collect depends on the context of your interactions with Microsoft and the choices you make, including your privacy settings and the products and features you use. We also obtain data about you from third parties. We collect device and usage data, name and contact data, payment data, subscription and licensing data, interactions data (including how you interact with Microsoft products), content (including content of files and communications if necessary to provide you the service), video or voice recordings if you use voice features, location data, and inferences we make about you to create a profile.
REGULATORY FRAMEWORK: This provision implicates GDPR Art. 5(1)(c) (data minimization), Art. 13 (transparency), Art. 9 (special category data if health/biometric inferences are drawn), and Art. 22 (automated profiling); CCPA/CPRA §1798.100 (right to know) and §1798.121 (sensitive personal information categories including precise geolocation, biometric data, and inferences); COPPA for child account data collection; Illinois BIPA for voice/biometric data; and FTC Act Section 5.
🔒
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Applicable agencies
FTC
The FTC has Section 5 enforcement authority over unfair or deceptive data collection practices including broad consumer data profiling by technology companies.