Respect DNT

[secondfry]

• Study EULA.
• If needed, just hash UserId.

[secondfry]

About DNT in web:

A DNT clause is where you let your users know whether or not you respond to their DNT requests. You aren't required to respond to requests, but you're required to disclose whether you do or not.

About what is public available information from Steam and what is private personal information (tl;dr SteamID is not private personal information).

At a minimum, the public persona name you have chosen to represent you on Steam and your Avatar picture are accessible this way, as well as whether you have received a ban for cheating in a multiplayer game. The accessibility of any additional info about you can be controlled through your Steam Community user profile page; data publicly available on your profile page can be accessed automatically through the Steamworks API. ... While we do not knowingly share Personally Identifying Information about you through the Steamworks API such as your real name or your email address, any information you share about yourself on your public Steam Profile can be accessed through the Steamworks API, including information that may make you identifiable.

SCP:SL EULA

As a server administrator; after sending “Do Not Track” signal by a game client (as a server command and/or in authentication token), you are:

• not permitted to store any data about the player that are not necessary for ensuring server security (examples of data required for server security: list of banned players, round logs)
• not permitted to publish any data about the client (access should be restricted only to authorized server administrators)
• not permitted to use any data about the client for any other purposes than server security (i.e. you cannot make any statistics about the client)
• obligated to remove all data about the client not required for ensuring the server security within 24 hours.