Users discovered in October 2025 that Gaming Copilot was capturing gameplay screenshots and sending data to Microsoft servers without clear consent, installed automatically through Xbox Game Bar.
Installation: Automatic via Xbox Game Bar update
Behavior: Captures screenshots, extracts text via OCR, sends to Azure
Issue: Network traffic persists even when Game Bar is closed
Microsoft response: Data "not stored or used for model training"
Security researcher Kevin Beaumont confirmed screenshots were being sent to undocumented Microsoft Azure endpoints. Microsoft's response focused on what data was not used for, rather than addressing why the feature was installed without explicit consent or why data collection continued when not in active use. The pattern echoed the original Recall backlash: automatic installation, unclear data practices, and defensive responses.
Sources: WinBuzzer