Steam automatically collects detailed information about every game you play, including your progress, time played, and technical details about your computer or device.
This analysis describes what Steam's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Game statistics and device identifiers are persistent data that build a detailed profile of your gaming behavior over time, and this data may be shared with third-party developers as described elsewhere in the policy.
Valve collects granular gameplay data including playtime, progress, preferences, device settings, and unique device identifiers for every title you access through Steam. This data category is one of the most extensive collected and is shared with game publishers and developers.
How other platforms handle this
Geolocation data, such as device location. Internet or other electronic network activity information, such as browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement. Device identifiers, such as IP address, unique d...
When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...
American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons. Due to the nature of our Services, we may collect travel i...
Monitoring
Steam has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"In order to provide you with services, we need to collect, store and use various information about your activity in our Content and Services. "Content-Related Information" includes your Steam ID, as well as what is usually referred to as "game statistics". By game statistics we mean information about your games' preferences, progress in the games, playtime, as well as information about the device you are using, including what operating system you are using, device settings, unique device identifiers, and crash data.— Excerpt from Steam's Steam Privacy Policy
(1) REGULATORY LANDSCAPE: Collection of unique device identifiers and crash data engages GDPR considerations around device-level personal data. Under GDPR, unique device identifiers are generally treated as personal data where they can be linked to an individual. CCPA similarly treats device identifiers as personal information. The FTC and EU supervisory authorities are the relevant enforcement bodies. (2) GOVERNANCE EXPOSURE: Medium. The breadth of this data category, combined with the policy's authorization to share it with third-party developers, creates a significant data volume and scope exposure. The legal basis asserted for this collection is contractual necessity, which may be supportable for core service delivery but may be more difficult to sustain for all game statistics use cases including marketing and recommendations. (3) JURISDICTION FLAGS: EU and UK users have the right to object to processing based on legitimate interests and to request access to this data category. California residents have the right to know about collection and use of device identifiers as personal information. Children's data protections under COPPA and the UK Age Appropriate Design Code are particularly relevant given Steam's user base. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise and B2B customers should confirm whether game statistics data shared with developers is covered by data processing agreements. Developers receiving this data category may become independent controllers with separate compliance obligations. (5) COMPLIANCE CONSIDERATIONS: Data mapping exercises should enumerate game statistics as a distinct personal data category with its own legal basis, retention period, and sharing register entry. Retention of device identifiers beyond the period necessary for service delivery may require justification under GDPR data minimization principles.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Game statistics and device identifiers are persistent data that build a detailed profile of your gaming behavior over time, and this data may be shared with third-party developers as described elsewhere in the policy.
Valve collects granular gameplay data including playtime, progress, preferences, device settings, and unique device identifiers for every title you access through Steam. This data category is one of the most extensive collected and is shared with game publishers and developers.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Steam.