Microsoft confirms a Global Device Identifier (GDID) exists on Windows devices even without signing into a Microsoft Account. The identifier persists through clean installs and drive wipes, suggesting a hardware-level component tied to the Windows license.

An FBI case filing reveals the GDID g:6755467234350028 was recorded visiting the ngrok signup page. Critically, Microsoft linked the full URL path—not just the domain—to the device identifier, raising questions about browser address bar monitoring.

This suggests Microsoft may be storing all visited URLs alongside the GDID and timestamps, potentially via Microsoft Defender SmartScreen. Since search queries appear in address bar URLs, search terms could also be captured.

The FBI documentation implies persistent device fingerprinting that survives complete system resets, challenging assumptions about anonymity when using Windows without a Microsoft Account.