Microsoft Corporation, as the data controller for Microsoft account, collects and processes certain personal information in connection with your Microsoft account, the email address and password you use to sign in to Microsoft programs and services such as Hotmail and Messenger, Microsoft services such as Xbox Live and Zune, and anywhere else you see the Microsoft account logo. Microsoft account uses this information only to operate an authentication service, to improve security, and to provide customer support for Microsoft account.
Your account information is stored on Microsoft servers located at One Microsoft Way, Redmond, Washington 98052 USA. You must provide the correct password to access your account information. Your password is never shared with sites or services that require a Microsoft account; however, if a service requiring a Microsoft account helps you create or reset your password, that service might have access to the password that it issues to you.
You can create a limited account with credentials—such as an email address and password, a mobile phone number and PIN, a smart card, or a security key—that you can use to log in to Microsoft account sites and services by providing only an email address and a password. If you don't provide this information, you can't access and use Microsoft account. To create a limited account, visit the Microsoft account website.
You can also create credentials at a site or service that requires a Microsoft account, but that site determines the personal information you must provide. If you provide this information, you can't obtain an account at those sites or the credentials needed to sign in to Microsoft account sites and services. If you sign up for credentials at a site that requires a Microsoft account, that site might store your personal information (except your password).
Certain Microsoft account sites and services require your email address to provide you with their services. In those cases, Microsoft account provides your email address when you sign in to that site or service. In addition, Microsoft account always shares your Microsoft account Unique ID and certain operational information with the sites you sign in to that require a Microsoft account. If you signed up for a limited account on Microsoft account using the passport.com domain for your email address, you'll be asked to provide only a user name and password.
Microsoft account doesn't control or monitor the privacy practices of sites requiring a Microsoft account. Some of these sites are located in countries outside the European Economic Area (EEA) and thus might not be subject to laws that provide an adequate level of protection for personal data by EEA standards. To view a list of the countries whose data protection laws have been found by the European Commission to be adequate, see the EU Data Protection website. It is important that you carefully review the privacy statements for sites requiring a Microsoft account before deciding whether to sign in to them.
You have the right to access and change your personal information stored on Microsoft account. For more info, contact Microsoft account support.
Microsoft account is available in several languages. If you contact us in one of these languages, Microsoft account will respond to you in that language.
For more information regarding online privacy, please review the Microsoft Online Privacy Notice Highlights.
