An advanced, lightweight Windows Telemetry and GDID Footprint Mitigation Tool. WinGhosts is a portable batch script designed to harden your Windows environment, disable deep OS tracking pipelines, and secure your digital footprint against persistent hardware identifiers like the Global Device Identifier (GDID).

• GDID Transmission Block: Severs the Connected Devices Platform (CDPSvc) and Delivery Optimization (DoSvc) pipelines that link your system activity to a persistent ID.
• Maximum Privacy Policy: Enforces strict security-only minimums on Windows Data Collection via registry policies.
• Debloat Background Tracking: Permanently disables Cortana search remnants, background web-hooking, and Xbox Live telemetry.
• Application Hardening: Freezes Microsoft Edge background metrics/reporting and disables Windows Error Reporting (WerFault) memory dump transmissions.
• Live Privacy Scan: Includes a built-in diagnostics menu to instantly audit your system's exposure state (SAFE vs EXPOSED).
• Fail-Safe Rollback: Easily revert all applied tweaks back to standard factory Windows telemetry defaults.

Since this tool modifies system-level services and registry values, it must be executed with elevated privileges.

1. Download or copy the script content into a file named WinGhosts.bat.
2. Right-click WinGhosts.bat and select "Run as administrator".
3. Use the interactive menu to audit your system or engage full privacy mode.

Recommendation: A system reboot is highly recommended after executing Option 5 (ENGAGE GHOST MODE) to ensure all network hooks and background services are completely terminated.

  1. Block GDID Transmission (Disable CDP & DoSvc Pipelines)
  2. Maximize Privacy (Ditch Optional Telemetry via Registry)
  3. Disable Cortana remnants & Xbox Live Telemetry
  4. Disable Edge Browser Telemetry & Error Reporting (WerFault)
  5. ENGAGE GHOST MODE (Run ALL tweaks 1-4 for maximum protection)
  6. Check Privacy Status (Live System Scan)
  7. Revert Changes (Restore Windows Defaults)
  8. Exit

• UTF-8 Forced Encoding: Uses chcp 65001 to prevent formatting and encoding artifacts in the Windows Command Prompt.
• Registry Injection: Directly creates native policies inside HKLM\SOFTWARE\Policies\Microsoft\ which override default user-level telemetries.
• Service Termination: Alters service start triggers (Start = 4) to prevent targeted telemetry engines from starting during system boot, closing the early-boot leakage window.

This script modifies system-level registry keys and Windows services. 
Use it at your own risk. The developers are not responsible for any system 
instability, broken applications, or data loss caused by executing these tweaks. 

Always run a Privacy Scan (Option 6) or utilize the Revert Changes option (Option 7) 
if you experience unexpected software behavior.