While I was asleep Valve announced some new profile privacy settings which are good for users, but it seems Steam Spy is likely going to shut down as a result.
The new privacy options are actually quite good, as they were pretty limited before. Originally, if I wanted to keep my playtime private I had to essentially make my Steam profile completely private to everyone. That's all changed now, since there's a lot more settings you can tweak. Here's an example of how mine currently looks:
You can now have a public profile, but keep all details of games you own private for example. You could also make your game information public, but keep your playtime private. It's just so much better than what we had before, since privacy for users is important and putting them in control and having it as private should be the default. It should be up to users if they want it public, not public by default in my opinion.
Valve also said they're working on a new "Invisible" mode where you're shown as offline, but you will be able to actually see your friends list and message people. For me especially, that mode will be perfect and I'm very happy they're doing it. As someone with over 300 friends on my list due to running tournaments, co-op play sessions on Twitch and so on, it can end up quite overwhelming any time I decided to set myself as any form of online to message people.
This has had a side-effect that Valve has hidden the games you own by default to the public, which isn't noted in their announcement. This has caused the owner of the tracking website Steam Spy to say "Steam Spy relied on this information being visible by default and won't be able to operate anymore.".
Quite sad, since Steam Spy offered some interesting statistics that Valve didn't give out, but likely many developers and publishers would have preferred it to stay hidden. I've seen the other side of the coin too, with plenty of developers on both sides filling up our Twitter feed today, as some developers found it more useful than what Valve give them—that tells me Valve really need to improve how they report information to developers directly. It is odd, as people from Valve have even said Steam Spy was useful, so it will be interesting to see what happens.
"This category includes the list of all games on your Steam account, games you’ve wishlisted, your achievements and your playtime. This setting also controls whether you’re seen as "in-game" and the title of the game you are playing"
I want to decide for every. single. item. who can see it.
Games I own? Friends
Wishlist? Everyone
Achievements? Friends
Playtime? Nobody
Ingame? Nobody
Hell, I even want to control access to it for certain API-users. Like, I want to allow GOG and Humble to see my game lists, without broadcasting it to the public. (GOG for GOG connect, and Humble so that is can display whether I have a game before I decide whether I want a Steam or Gift key.)
For the inventory, I want to decide by the type of item. Not just gift/non-gift, but in-game items, trading cards, coupons, gems.
GOG Connect shouldn't be affected, anything that has you logging into Steam to connect together would then have access to it. I've never had problems with it and my profile was 100% private previously and it worked fine.
I do agree it could do with a little more, but it's a damn good step in the right direction. It also hopefully builds a foundation for them to add more.
I don't have as much faith as you in Valve doing more than the absolutely minimum. :P
This change is likely fueled by the upcoming EU General Data Protection Regulation (GDPR), not because Valve listened to the people or whatever.
GOG Connect shouldn't be affected, anything that has you logging into Steam to connect together would then have access to it. I've never had problems with it and my profile was 100% private previously and it worked fine.
Huh? I had my profile private in the past, and I made it public again specifically for GOG Connect. Because it didn't work.
I mean, they even say it: "NOTE: Make sure your Steam Privacy Settings & Profile Status are set to public".
I guess I can handle this a bit more relaxed now. Seems Cambridge Analytica made some people think after all, huh?
Valve also said they're working on a new "Invisible" mode where you're shown as offline, but you will be able to actually see your friends list and message people.It's already possible to see your friend list when offline (by visiting the friends tab of your profile) and messaging too (by clicking "Send Message" on a friend's profile). Though the chat window doesn't update and you have to close and reopen it to get new messages.
Still nice that they're gonna add an invisible mode, that should make it easier to use :)
Yeah, I am aware. However, this mode makes it a ton easier to work with since it will properly integrate with the friends and chat system.Valve also said they're working on a new "Invisible" mode where you're shown as offline, but you will be able to actually see your friends list and message people.It's already possible to see your friend list when offline (by visiting the friends tab of your profile) and messaging too (by clicking "Send Message" on a friend's profile). Though the chat window doesn't update and you have to close and reopen it to get new messages.
Still nice that they're gonna add an invisible mode, that should make it easier to use :)
Strange, I don't remember having issues with it, but there's the possibility I'm remembering wrong it has been a while. At least now I shouldn't need to do anything :)
Steam OpenID doesn't give access to anything but Steam 64bit user ID (numeric). It authorizes the session, i.e. it says this connection to your website is a Steam user number 1234123412341234, that's it. All other things, like list of games a user owns, playtime, groups, etc., are obtained by asking a different API and passing the previously mentioned user ID but only public or authorized data are being returned in the process. Applications like the ones powering SteamSpy either use these other APIs or data-mine SteamCommunity WWW (probably asking Steam to return XML instead of HTML where possible).
By "authorized data" I mean data that are accessible to a given API key. API key authorization works exactly the same as friends permissions, e.g. using your own API key you can access:
- your own (public and private) data,
- public data of your friends,
- data of your friends that are set to be accessible by friends only,
- public data of strangers.
If you'd like to pass all your data to a trusted website, you'd have to provide it with your API key (and this website would have to use it, which is cumbersome when you have many users). Steam, however, only allows you to generate one full-access API key, therefore it would be nuts to give it away.
Above said, there's a parameter in OpenID request that should let the API user to specify more permissions but I never managed to use it.
Last edited by cprn on 11 April 2018 at 3:10 pm UTC
Thanks to SteamSpy We know there are more or less 290 million steam users...
SteamSpy added transparency to the very limited info provided by Valve...
Indeed http://store.steampowered.com/hwsurvey doesn't work anymore..
When a company add a veil of darkness to the info that was public few days ago, is because something really bad must be going on.
The poor privacy controls were the reason why I didn't add friends to Steam at all. I don't want to broadcast all over the world which game I am playing when, and for how long. I wonder why people thought that's anyone's business?Huh? Maybe your idea of friends is different than mine, but I surely want my friends to see when I'm in a game and what that game is. I want them to see and join most of the time.
I'm glad for the additional control. My steam profile is private because I wanted a couple things hidden so I woudn't get spammed for trade offers, but then I couldn't connect other sites that have better dashboards for viewing your own data.
As long as we're talking about further improvements, I think Valve should look at how CCP implements API key permissions. It's wonderfully more granular with optional expiration times even.
My idea of friends is quite specific and involves a small number of people I know offline. However, various online thingies such as Steam have appropriated the term, which makes things confusing. What Steam or Facebook call "friends", I would call "acquaintances" (or in some cases, "random dudes who cold-called me on the internet for some reason" ) and yes, what I'd want them to know is quite limited.The poor privacy controls were the reason why I didn't add friends to Steam at all. I don't want to broadcast all over the world which game I am playing when, and for how long. I wonder why people thought that's anyone's business?Huh? Maybe your idea of friends is different than mine, but I surely want my friends to see when I'm in a game and what that game is.
Last edited by Purple Library Guy on 11 April 2018 at 4:42 pm UTC
Last edited by hardpenguin on 11 April 2018 at 5:09 pm UTC
One thing that really bothers me is when people know when I am awake and playing games.
Really... If you want to talk to me, poke me. If I reply you are in luck.
This is bad...Quite opposite, GDPR is being enforced next month. The two-year transition period is finally over, May 25 is the date businesses are required to be compliant with the General Data Protection Regulation.
If some services made themselves dependent on harvesting user data without clearly asking the individual users for consent, it's their own fault if the skies are coming falling down on them. Dirty business practices deserves no sympathy and they've had their time to fix their problems.
Privacy isn't dead as some believe, it's just getting started, with GDPR we are starting to recovering from the plague of violations and fight for the rights citizens should have had from the very beginning.
In particular, see bullet point #4.
Either coincidence, or Valve pay very close attention to Steams public perception online.
Push Valve to do even more for privacy.
Interesting that they announce these changes so soon after a certain community post was made calling out some issues.Which one? Only "Steam Surveillance" and "Steam Censorship" have 4 bullets (and more).
In particular, see bullet point #4.
Either coincidence, or Valve pay very close attention to Steams public perception online.
See more from me