|
|
| Line 57: |
Line 57: |
| At the time of disclosure, Valve stated they had no evidence that the encrypted credit-card numbers or personally identifying information had been taken, nor was there evidence that the encryption on the credit-card numbers or passwords had been cracked. Nevertheless, they advised users to closely monitor their credit-card activity and statements as a precautionary measure. | | At the time of disclosure, Valve stated they had no evidence that the encrypted credit-card numbers or personally identifying information had been taken, nor was there evidence that the encryption on the credit-card numbers or passwords had been cracked. Nevertheless, they advised users to closely monitor their credit-card activity and statements as a precautionary measure. |
| }} | | }} |
| ==Consumer Impact Summary==
| |
| <span></span>
| |
| ====Privacy====
| |
| <span></span>
| |
| *Collects extensive personal data including email, location, payment details, and device information<ref name="privacy-policy">[https://store.steampowered.com/privacy_agreement/ "Privacy Policy Agreement."] ''Steam''. February 14, 2024. Retrieved January 17, 2025.</ref><br />
| |
| *Records and stores all user communications through platform features<ref name="privacy-policy" /><br />
| |
| *Keeps certain user data indefinitely for "gameplay consistency" even after account deletion<ref name="privacy-policy" /><br />
| |
| *Tracks gaming behavior including preferences, progress, playtime, and device usage<ref name="privacy-policy" /><br />
| |
| *Shares user data with game developers and third-party service providers<ref name="privacy-policy" /><br />
| |
| *Makes user profile data publicly available through Steamworks API<ref name="privacy-policy" /><br />
| |
| *Uses cookies and similar technologies for tracking across websites<ref name="privacy-policy" /><br />
| |
| *Retains transaction data for up to 10 years after account closure<ref name="privacy-policy" /><br />
| |
| <span></span>
| |
| ====Freedom====
| |
| <span></span>
| |
| *Users do not own purchased games, only receive limited licenses<ref name="subscriber-agreement">[https://store.steampowered.com/subscriber_agreement "Steam Subscriber Agreement."] ''Steam''. September 26, 2024. Retrieved January 17, 2025.</ref><br />
| |
| *Can terminate access to paid content at Valve's discretion<ref name="subscriber-agreement" /><br />
| |
| *No right to transfer or resell purchased games<ref name="subscriber-agreement" /><br />
| |
| *Imposes regional restrictions on game activation and playing<ref name="subscriber-agreement" /><br />
| |
| *Can unilaterally modify terms with 30-day notice<ref name="subscriber-agreement" /><br />
| |
| *Mandatory client updates required to access library<ref name="subscriber-agreement" /><br />
| |
| *Users must accept all changes to maintain access to purchased content<ref name="subscriber-agreement" /><br />
| |
| *No option to opt out of core data collection while using service<ref name="privacy-policy" /><br />
| |
| <span></span>
| |
| ====Transparency====
| |
| <span></span>
| |
| *Provides clear refund policy for games (any game played less than 2 hours within 14 days)<ref name="subscriber-agreement" /><br />
| |
| *It will mainly reference instances where the product prevents inspection or is intentionally confusing<br />
| |
| *Maintains detailed system requirements information for all games<ref name="subscriber-agreement" /><br />
| |
| *Offers comprehensive privacy policy in accessible language<ref name="privacy-policy" /><br />
| |
| *Unclear processes for account termination and data removal<ref name="privacy-policy" /><br />
| |
| *Limited transparency about content moderation decisions<ref name="subscriber-agreement" /><br />
| |
| *Vague about specific data retention timeframes<ref name="privacy-policy" /><br />
| |
| *No clear disclosure of recommendation algorithm factors<ref name="privacy-policy" /><br />
| |
| <span></span>
| |
| ==Consumer Protection Incidents==
| |
| <span></span><h4>Modification to terms-of-service (Sep. 2024)</h4>In September 2024, Steam implemented significant changes to its subscriber agreement that altered user rights and game ownership terms. Additionally, it removed [[Forced Arbitration|forced arbitration]] from the Steam Subscriber Agreement.<ref>Carpenter, Nicole (September 27, 2024). [https://www.polygon.com/explained/457557/valve-arbitration-steam-subscriber-agreements "Valve removes arbitration from its Steam agreements — here's what that means for you"]. ''Polygon''. Retrieved January 17, 2025.</ref><ref>Rossmann, Louis (September 27, 2024). [https://www.youtube.com/watch?v=1f81qXxggo8 "Steam altered the terms of the sale; you'll be happy they altered it further!"] ''YouTube''. Retrieved January 17, 2025.</ref> Key changes included:
| |
| <span></span>
| |
| *Enhanced ability to terminate accounts for violations
| |
| *Additional data collection and sharing provisions
| |
| *Modified dispute resolution procedures<h4>Customer database hack (Oct. 2011)</h4>In October 2011, Valve was forced to temporarily close the Steam Community forums following security-breach concerns. Days later, the company confirmed that hackers had compromised one of its customer databases. The compromised database contained user information, including encrypted credit-card numbers, billing addresses, purchase histories, email addresses, and encrypted passwords for Steam accounts.<ref>Johnson, Casey (November 10, 2011). [https://arstechnica.com/gaming/2011/11/valve-confirms-steam-hack-credit-cards-personal-info-may-be-stolen/ "Valve confirms Steam hack: credit cards, personal info may be stolen"]. ''Ars Technica''. Retrieved January 17, 2025.</ref>
| |
| <span></span>
| |
| At the time of disclosure, Valve stated they had no evidence that the encrypted credit-card numbers or personally identifying information had been taken, nor was there evidence that the encryption on the credit-card numbers or passwords had been cracked. Nevertheless, they advised users to closely monitor their credit-card activity and statements as a precautionary measure.
| |
|
| |
| <span></span>
| |
| ==References==
| |
| <span></span><references /> | | <span></span><references /> |