Privacy+ Playbook¶

The Privacy+ Playbook, developed by Amelabs, is a set of modifications for Windows 11, designed to maximize privacy and stability while retaining functionality. It removes unwanted services, disables telemetry, and streamlines the interface for a leaner, more private experience.

Screenshot of the Privacy+ desktop with integrity check open

About Privacy+¶

Privacy+ is for users seeking extreme privacy and system control. It deletes all affected services and files outright—rather than just disabling them—ensuring no telemetry or residual data remains.

Warning

This playbook takes extreme measures, removing all Microsoft services from your system. It’s not suitable if you depend on these services or are wary of the risks tied to such aggressive changes.

System Modifications¶

Privacy+ applies curated file deletions, software installations, and configuration changes. Expand below for the full list:

âś…List of modifications
  • Unmatched Privacy and Stability: Privacy+ is the most private and stable Windows modification available, reducing internet traffic to just 103 packets (vs. 2688 on stock Windows) and preventing inherent OS changes, as confirmed by our testing methodology.
  • Disk Space Savings: Frees up approximately 2GB of files compared to a standard Windows installation by removing unnecessary components.
  • Removes Privacy-Infringing Services: Includes Windows Update, Windows Security services (Smart Screen, SIH, etc.), Xbox Gaming Services, OneDrive, and more.
  • Removes Windows Defender: Due to its inferior performance and significant system impact compared to other antivirus solutions.
  • Removes Unnecessary Built-In Apps: Such as Photos, Windows Maps, PCHealthCheck, and more.
  • Enhances Security:
    • Optional Unix-like permission system requiring explicit passwords for administrative actions (toggleable in settings)
    • Disables the insecure SMBv1 protocol
    • Reduces the overall attack surface
  • Disables BitLocker on the System Drive: Enabled by default on new Windows 11 installations. Its default configuration does not prevent physical attackers from decrypting the drive, as they can boot from a Windows installation USB and disable it using manage-bde -off. For better encryption, consider VeraCrypt, though it may impact performance.
  • Removes Annoyances and Advertising: Eliminates unnecessary features and ads from Windows.
  • Improves the UI:
    • Replaces the start menu
    • Cleans up the taskbar
    • Removes unused settings related to Microsoft cloud services
    • Uses saner defaults, like showing file extensions

Testing Methodology¶

To ensure the effectiveness of Privacy+, we conducted rigorous testing using Wireshark in a controlled virtual machine environment. The results confirmed a significant reduction in network traffic, validating the privacy enhancements. Download our detailed testing methodology to learn more.

đź“„ Testing Methodology

Download PDF overview

Utilities Included with Privacy+¶

Privacy+ includes Privacy+ Settings, a command-line tool for managing system features unavailable in Windows Settings, and App Fetch Experimental, a GUI tool for installing and managing Microsoft Store apps independently.

⚙️ Privacy+ Settings

Manage system features

📦 App Fetch Experimental

Manage Store apps independently

Installation Methods¶

Choose between two installation approaches:

  • Standard Installation: Apply Privacy+ to an existing system, keeping your files and apps while removing Microsoft services. Minimal risk is involved.

  • ISO Injection: Build a custom Windows 11 ISO with Privacy+ pre-applied, ideal for fresh installs or multi-device deployment.

Standard Installation (Manual Method)¶

Privacy+ can be installed in-place to an existing system, allowing you to keep your apps and data. Ensure your system is running a supported, fully updated version of Windows 11 for compatibility. Check the guides below for fresh installation, preperation, and setup instructions:

đź’ż Installing Windows

Re-install for Privacy+

🖥️ Preparing Windows

Use an existing system

đź“Ą Installing Playbooks

Apply to existing system

ISO Injection (Custom ISO)¶

ISO Injection creates a custom Windows 11 ISO with Privacy+ pre-applied, featuring a custom, Amelabs-developed OOBE, perfect for fresh installs or multi-device setups. You’ll need a Windows 11 ISO and the Privacy+ Playbook. See the guides below for details.

đź’‰ ISO Injection

Create Privacy+ injected ISO

🗑️ Removing / Upgrading

Remove the playbook