Steam automatically collects detailed information about every game you play, including your progress, time played, and technical details about your computer or device.
This analysis describes what Steam's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Game statistics and device identifiers are persistent data that build a detailed profile of your gaming behavior over time, and this data may be shared with third-party developers as described elsewhere in the policy.
Provision renamed from "Game Statistics and Content-Related Data Collection" to "Game Statistics and Device Data Collection" with no severity change.
View full change record →Valve collects granular gameplay data including playtime, progress, preferences, device settings, and unique device identifiers for every title you access through Steam. This data category is one of the most extensive collected and is shared with game publishers and developers.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
Steam has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"In order to provide you with services, we need to collect, store and use various information about your activity in our Content and Services. "Content-Related Information" includes your Steam ID, as well as what is usually referred to as "game statistics". By game statistics we mean information about your games' preferences, progress in the games, playtime, as well as information about the device you are using, including what operating system you are using, device settings, unique device identifiers, and crash data.— Excerpt from Steam's Steam Privacy Policy
(1) REGULATORY LANDSCAPE: Collection of unique device identifiers and crash data engages GDPR considerations around device-level personal data. Under GDPR, unique device identifiers are generally treated as personal data where they can be linked to an individual. CCPA similarly treats device identifiers as personal information. The FTC and EU supervisory authorities are the relevant enforcement bodies. (2) GOVERNANCE EXPOSURE: Medium. The breadth of this data category, combined with the policy's authorization to share it with third-party developers, creates a significant data volume and scope exposure. The legal basis asserted for this collection is contractual necessity, which may be supportable for core service delivery but may be more difficult to sustain for all game statistics use cases including marketing and recommendations. (3) JURISDICTION FLAGS: EU and UK users have the right to object to processing based on legitimate interests and to request access to this data category. California residents have the right to know about collection and use of device identifiers as personal information. Children's data protections under COPPA and the UK Age Appropriate Design Code are particularly relevant given Steam's user base. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise and B2B customers should confirm whether game statistics data shared with developers is covered by data processing agreements. Developers receiving this data category may become independent controllers with separate compliance obligations. (5) COMPLIANCE CONSIDERATIONS: Data mapping exercises should enumerate game statistics as a distinct personal data category with its own legal basis, retention period, and sharing register entry. Retention of device identifiers beyond the period necessary for service delivery may require justification under GDPR data minimization principles.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Game statistics and device identifiers are persistent data that build a detailed profile of your gaming behavior over time, and this data may be shared with third-party developers as described elsewhere in the policy.
Valve collects granular gameplay data including playtime, progress, preferences, device settings, and unique device identifiers for every title you access through Steam. This data category is one of the most extensive collected and is shared with game publishers and developers.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Steam.