Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Steam's published policy; none has been tested (run by us) yet.
1Portabilitystated
Valve states you have the right to receive your data in a structured, machine-readable format, but the policy specifies it "makes your Personal Data available in structured HTML format" — HTML is not a true machine-readable export (no JSON or CSV), so portability is scored at the single-format level.
Steam — Privacy Policy (data portability / HTML format) · accessed Jun 2026 ↗
1Trains AIstated
The Steam Privacy Policy makes no statement about using personal data to train AI or machine-learning models. Absent an affirmative no-training commitment, model-training use is scored conservatively at the partial level rather than credited as a full opt-out.
Steam — Privacy Policy (silent on AI training) · accessed Jun 2026 ↗
1API access — feeds Agent Readiness, not the /12stated
A consumer can generate a personal Steam Web API key (steamcommunity.com/dev/apikey) and script read access to their own profile and owned-games data (e.g. GetOwnedGames), but it is a static key rather than a revocable OAuth grant and does not cover the full Privacy Dashboard export, so agent access is scored at the partial level.
Steam — Web API key (key-based, no OAuth grant) · accessed Jun 2026 ↗
Reviewed Jun 2026, read directly from Valve's published Steam Privacy Policy and the Steam Privacy Dashboard help page. Steam stands out among the catalogue: the policy states plainly that "Valve does not sell Personal Data," and all rights are exercised through a single self-serve dashboard rather than a request queue. The one clear shortfall is portability format — exports are HTML only, not machine-readable JSON or CSV. The policy is silent on AI-model training, so that cell is scored conservatively rather than credited.