Windows Update Privacy Statement (Last Updated 10/15/2002)
Windows Update is committed to protecting your privacy. To provide you with the appropriate list of updates, Windows Update must collect a certain amount of configuration information from your computer. None of this configuration information can be used to identify you. This information includes:
Operating-system version number
Internet Explorer version number
Version numbers of other software for which Windows Update provides updates
Plug and Play ID numbers of hardware devices
Region and Language setting
The configuration information collected is used only to determine the appropriate updates and to generate aggregate statistics. Windows Update does not collect your name, address, e-mail address, or any other form of personally identifiable information.
Windows Update also collects the Product ID and Product Key to confirm that you are running a validly licensed copy of Windows. A validly licensed copy of Windows ensures that you will receive on-going updates from Windows Update. The Product ID and Product Key are not retained beyond the end of the Windows Update session.
To provide you with the best possible service, Windows Update also tracks and records how many unique machines visit its site and whether the download and installation of specific updates succeeded or failed. In order to do this, the Windows operating system generates a Globally Unique Identifier (GUID) that is stored on your computer to uniquely identify it. The GUID does not contain any personally identifiable information and cannot be used to identify you. Windows Update records the GUID of the computer that attempted the download, the ID of the item that you attempted to download and install, and the configuration information listed above.
OK, so....the only 3rd party software for which it collects information is that 3rd party software for which it distributes patches. Hmm, no privacy issue here.
No personally identifiable info is gathered or retained. Interesting that they don't even track uniqueness by IP address, they track it with a GUID in a cookie. While it is true that the GUID will give them a better idea of uniqueness (since one computer can visit the site using multiple IP addresss - especially those on dial-up), it's also important since IP addresses are partially trackable.
In my opinion no new information has been reveal either by these German researchers or by the Register. Microsoft clearly states in their privacy statement the very things that were supposedly revealed in this report/article (and yes, I did read the report).
|