Hello SG,

it seems to me that there are more and more users that have deleted their SG account in the past and re-registered on SG. There might be valid reasons for that (e.g. spending too much time/money here and wanting to get away from that habit) but there are also some less valid reasons (from the community's point of view).

As a group admin I am wondering, what some of you think about the admission of re-registered accounts to groups?

For Unlucky-7 I will not invite accounts that I know of have been here in the past or will kick them, as they have probably won more than 7 games the first time they were around and know the feel of winning. Of course there are exceptions, some generous, well known, users that join the group as gifters and never join a single giveaway.

For other groups, there is a nagging feeling that those users might have broken group rules en masse in the past, especially if they are not upfront about having been on SG in the past.

To make this a proper thread: stuff

Edit: Thanks for the feedback, here and in private. I will leave the thread open for a day or two, in case anyone wants to finish a discussion here.

1 year ago*

Comment has been collapsed.

Should re-registered accounts considered to have a clean slate for purposes of groups?

View Results
Yes
No
It depends... (please write something below)

It depends... (please write something below)

To be short: It's close to a No for me but mistake happens... so it should be a "can't join again without invitation" or "a delay" something like that
... but i don't think this can be a priority for Valve unfortunately

1 year ago
Permalink

Comment has been collapsed.

the only reason for me to re-register would be to start from 0 blacklists.
i think i got on quite a lot when i had times of rant and beeing depressed with me, the world or whatever that was stuck in my head...
but re-registering would also be the easy way so i will see how this year goes ahead

1 year ago
Permalink

Comment has been collapsed.

I would guess, that some would blacklist you again, just for having re-registered.
Just try to ignore the numbers. I should hit 300 this year, assuming the gradient stays the same.

1 year ago
Permalink

Comment has been collapsed.

How can you tell when someone else has re-registered?

1 year ago
Permalink

Comment has been collapsed.

If the use the same username, have some memorable way of commenting, ...
This goes both ways, good and bad.
There are some other indicators, I will share in private.

1 year ago
Permalink

Comment has been collapsed.

Umm, I bet you aren't on 390 blacklists though...

1 year ago
Permalink

Comment has been collapsed.

People are going to blacklist you regardless of how you behave on the forum. Even if you never ranted. They'll have all sorts of reasons for doing so. It is better not to even think about it. They're just numbers. =)

1 year ago
Permalink

Comment has been collapsed.

The fact you can even re-register in the first place seems a dubious practice, if it resets all your account stats as well.
Steamtrades, on the other hand, doesn't let you reactivate your account at all.
SG should be set to bring back all of our lovely (and not-so-lovely) stats, not give us a blank slate.

1 year ago
Permalink

Comment has been collapsed.

SG should be set to bring back all of our lovely (and not-so-lovely) stats, not give us a blank slate.

If I understand correctly that's some GDPR (and similar) stuff. You have the right to delete all your data, save for technical necessities.

1 year ago
Permalink

Comment has been collapsed.

Sure. But my argument is that you shouldn't be able to re-register.

1 year ago
Permalink

Comment has been collapsed.

I guess that's not possible if you really delete all data. Without the information SG can't know who already registered once.

1 year ago
Permalink

Comment has been collapsed.

That's BS.
You have to use your steam account to login, and as I said before, you can't re-register on Steamtrades if you delete your account, isn't it the same signup process???

1 year ago
Permalink

Comment has been collapsed.

I have no idea if or what ST is doing differently. But if they can tell who once registered, they clearly didn't delete every personal data.

1 year ago
Permalink

Comment has been collapsed.

Fair enough.

1 year ago
Permalink

Comment has been collapsed.

Not really. Having an account number blacklisted in a database to enforce bans and prevent abuse has nothing to do with personal data. You have to draw a line somewhere or you can't prevent certain kinds of behavior on any website.

1 year ago
Permalink

Comment has been collapsed.

I agree about the consequences but information where people once were members still is personal data.

1 year ago
Permalink

Comment has been collapsed.

As far as I know: At least in GDPR there are exceptions. You have to delete all personal data on request, unless they are required. In case of SG and ST your steamID64 or hashed steamID64 would qualify as such.

1 year ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 1 year ago.

1 year ago
Permalink

Comment has been collapsed.

Not speaking as a mod but as someone who's been working on data protection, the "legitimate use" exception is indeed a Pandora's box where companies have been able to stuff more or less whatever GDPR abuse they want. Doesn't mean it should be done though. Even IRL murderers get shorter sentences than lifetime.

Late edit: on a side note, since this thread was created in the context of groups, GDPR doesn't apply to the processing or personal data "by a natural person in the course of a purely personal or household activity" (Article 2 $2c). So if you keep it small for your personal Steam group, you should be fine keeping a personal naughty or nice list. But maybe not so much if you share it with a moderation squad.

1 year ago*
Permalink

Comment has been collapsed.

On a side note, does a Steam ID even count as personally identifiable information under GDPR? There is no way to trace a Steam ID to an actual person (unless the person posts their personal information on their Steam profile, but the ID itself does not have this). Even if it does count, I thought there were also carve outs for fraud prevention and such, so that a company could permanently block someone who has asked for data to be deleted.

1 year ago
Permalink

Comment has been collapsed.

For your first question, yes: https://www.steamgifts.com/go/comment/uFylr7o

For the second, the big keyword here is "permanent". The general idea is that the storage duration should be appropriate for the purpose. ISPs usually delete their IP assignment logs, which are data that can be vital to criminal cases (criminal as in "life and death", not as in "we call everything a crime"), within 2 years. Compared to that, it seems hard to justify keeping personal data "forever" just for the purpose of preventing someone from winning a few extra games. Particularly since keeping said data doesn't even achieve that purpose, as the person can, after all, just create a new Steam account.

That said, you have companies like American Express who indeed seem to keep a permanent record for the purpose of their welcome bonuses... Would be interesting to have someone sue them, to see how this holds. Or to check their privacy policy and find that maybe they actually don't keep them more than X years ^^
I'm not a specialist on edge cases, at my company we didn't try to cheat GDPR as much as legally possible, just to apply it properly 👀

1 year ago*
Permalink

Comment has been collapsed.

if the system just blocks/bans when they delete the account then that's find. many people have ban lists and it's not considered "personal data" if they want to re register they can deal with cs. there could also be notes on the ban listing infraction when a account was deleted if they want to bother with it. it may just be easier to just ban anyone deleting their account.

1 year ago
Permalink

Comment has been collapsed.

Okay, you have the right to delete your data, but you don't have the right to re-join.
I'm in favor of no re-entry.

1 year ago
Permalink

Comment has been collapsed.

Free Konrads!

If people want to return after a year or more they should keep all the same stats or not be allowed back.

1 year ago*
Permalink

Comment has been collapsed.

Never knew the guy, seems like he's a Iegend around here.

1 year ago
Permalink

Comment has been collapsed.

This is so weird... I have NEVER thought about what happens if you delete your account and you try to reregister UNTIL roughly an hour ago and now I see a topic about this. And I'm fairly certain we are not thinking about it for the same reason cause mine had nothing to do with groups.

This is really complex, I don't really like people being allowed to come back with a clean slate, but I also don't like punishing everybody for having used a potentially abusable system. I would prefer just reinstating old accounts if you rejoin, but I guess that would not really be legal because it would mean not deleting personal data upon request...

1 year ago
Permalink

Comment has been collapsed.

As a fellow group admin this bothers me a lot as well. I had situations where ex members tried to rejoin but while SG might forget our group website and my spreadsheet does not. But sadly that doesn't work if they were never part of the group before.

In my opinion it should be either one of the 3:

  • your account goes back to the way it was before (which I don't think you can due to GDPR, tho I guess you could have a GDPR delete and just a "hide info" delete depending on the persons wants at least)
  • you can't register again once your account is deleted (SG already prevents deleted suspended accounts from rejoining for XY amount of time so just make the list permanent to everyone)
  • Some sort of notification on the users profile that this is not their first account, that would give the heads up to people.
1 year ago*
Permalink

Comment has been collapsed.

As a group admin, I like your 3rd point. But as there are (imo) valid reasons to re-register, this is kind of a "blacklist me please" mark.

1 year ago
Permalink

Comment has been collapsed.

At least from the reason you mentioned here:

spending too much time/money here and wanting to get away from that habit

that you could solve by having a simple hide info/account lock/suspension or something along those lines that can be lifted on request instead and doesn't delete your account permanently.

Other than that I can't really think of any good reasons except privacy, but in that case I would assume you wouldn't want to rejoin again.

1 year ago
Permalink

Comment has been collapsed.

I agree with you, if you just need a break from something, you have to be really addicted to thinking of perm deleting an account!
Personally I always assumed most people that deleted it, were people that either won WAY to much and wanted to start over to not get hate or people who did something wrong and wanted a clean slate because of that.

1 year ago
Permalink

Comment has been collapsed.

About the GDPR aspect: you could argue that a user's statistics and suspensions are not sensitive personal information, so an argument could be made to keep that information.

However things like forum posts and comments will have to be deleted/anonymized - which is fine.

1 year ago
Permalink

Comment has been collapsed.

(Again not speaking as a mod but as someone who's been working on data protection)

GDPR applies to all personal data, not just sensitive personal data.
Article 9 mentions additional restrictions concerning the processing of special categories of data (which is how they call sensitive data) such as, for instance, racial, biometric or religious data.

And for the sake of clarity, personal data are defined in Article 4, §1

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

That means the Steam user ID is personal data. So are any data you keep linked to it.

1 year ago
Permalink

Comment has been collapsed.

I don't have any practical experience with GDPR at all, so thanks for clearing that up 🙂

1 year ago
Permalink

Comment has been collapsed.

Do you know if there's a stance on keeping data in a form that it can't be recovered without the user? I could think on storing things encrypted using the Steam ID as the key. If the user comes back, the system finds that their identifier can open a box, but until then its contents can't be recovered.

1 year ago
Permalink

Comment has been collapsed.

Unfortunately I never worked on such a case. My guess is it could still fall under indirect identification depending on how easily the system makes it to match any given Steam ID to the kept data. But considering the system must work in real time, i.e. when you want to register you want the account to be created immediately and not after days of brute-forcing through the database, I suppose the match will always be quite easy.

Probably safer to just rely on the legitimate interest of Article 6 §1f and keep the data for a set amount of time that sounds appropriate. Pretty much like it's done for SG, where the 1 year conservation seems quite reasonable.

1 year ago
Permalink

Comment has been collapsed.

Yes, on the technical side it could be made very fast with hashing the key, so at registration only a fraction of database entries have to be actually tested, not the entire collection.

1 year ago
Permalink

Comment has been collapsed.

As you've been working with it, I hope you don't mind if I ask a question. If someone requests to be forgotten should steps be done in order to prevent further information being stored or in essence the request itself also has to be forgotten? This would someone simply re-uploading the offending material, or in the case of SG prevent someone from rejoining.

1 year ago
Permalink

Comment has been collapsed.

I'm not sure I fully understand the question, but basically you should just forget about them. So not block them from coming back later.
But the deletion does not have to be instantaneous, it can be after a reasonable amount of time. And during that time you could either block them from coming back or allow them to restore their data, and they should be informed of all this before it's done. SG actually does all that pretty well I think.
Also some data may have to be kept for longer due to legal constraints. Like invoices.

1 year ago*
Permalink

Comment has been collapsed.

Thanks for the info :)

1 year ago
Permalink

Comment has been collapsed.

I think GDPR does not prevent to store which Steam users was once a member here so at least that part shouldn't be a problem.
Maybe cg can add account freezing along with deletion so those users cannot be replied or any other stuff that gives notifications cannot be done. Freezing period could be long so no one can abuse it and be used by who really needs a break. However once this is done, account deletion should be permanent and irreversible.

1 year ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 1 year ago.

1 year ago
Permalink

Comment has been collapsed.

Don't be sad.

1 year ago
Permalink

Comment has been collapsed.

More and more users, that were before perma suspended for multiaccounting, came back the last months (far from only 1-2 and as far as i see it all after 1 year+), with one of the old account names/with one of the old accounts (with the old stats).
Reports to this cases brought nothing.
A part of them autojoin now (at least we assume this -but will not invest months of time to collect again evidences-) since they joined back.
Questioning a mod about the situation and made him aware of it, brought nothing (we waited months).

So your feeling is correct.

I don't expect that a, positive, solution happens...

Best you can do is rejecting anyone with the same name, if you don't have very positive memories with him/her
But as soon as someone use a other accounts name, the group can be exploited (again). So no chance to prevent it (cg's server side theoretical excluded), when someone really want to.

"Perma suspended" means on sg 1 year.
To get someone perma suspended for all cheating stuff they do, took/take in many cases longer as 1 year.
The hunters of my group weren't happy about this surprise(s).

1 year ago*
Permalink

Comment has been collapsed.

from https://www.steamgifts.com/account/privacy/delete-account

You will not be able to register again for one year, or until the date of your last pending suspension, whichever is greater.

To my understanding this means with a perma suspended flag you cannot re-register on sg.

Edit: Also found this confirmation by cg: https://www.steamgifts.com/go/comment/d8MzrGF

1 year ago*
Permalink

Comment has been collapsed.

It would be great if a perma suspension would be perma but the facts show it have, at least one, loophole (and none with power care)

1 year ago*
Permalink

Comment has been collapsed.

The right to be forgotten? I would exercise my right to remember someone. bump

1 year ago
Permalink

Comment has been collapsed.

No.

1 year ago
Permalink

Comment has been collapsed.

I'm surprised SG doesn't associate their old stats (and black-and-whitelisting, etc) with their Steam account so that rereg'ing and tying to the old Steam account would make this a moot issue. That said, I'd probably treat it like a probationary thing, where people have to either provide details of their past account info or reach a certain, group-defined threshold of stats before being considered clean for admission.

1 year ago
Permalink

Comment has been collapsed.

GDPR, see above, e.g. DingDong2 comments.

1 year ago
Permalink

Comment has been collapsed.

I have never been banned but I rejoined a year after deleting my profile because I was working through a major breakdown. I do all kinds of impulsive shit when I'm down and low. I would never even consider joining the unlucky-group. It does bother me that sgtools still show me as level 10 when I am trying to figure out how to reach the state anew.

The whitelist thing is also annoying, I can't remember all the lovely people on here so my whitelist is not how I want it to be, but I'm going for 0 blacklists approach this time so the old stat can be erased for all I care.

AFAIK I have never broken any rules on this site though, and I have absolutely not tried to go out of my way to be anonymous (still same account name as ever)

1 year ago
Permalink

Comment has been collapsed.

As I said, there are valid (imho) reasons for deleting your account.
Thanks for making me aware of SGT :D
Edit: SGT seems not to be stuck for everyone.

1 year ago
Permalink

Comment has been collapsed.

Oh no, so it's a luck of the draw whether or not you're stuck with your old stats? Darn it! :')

1 year ago
Permalink

Comment has been collapsed.

Give this page a try: https://www.sgtools.info/sync

1 year ago
Permalink

Comment has been collapsed.

Ohhh, thank you!

1 year ago
Permalink

Comment has been collapsed.

Burdened with success? :P

1 year ago
Permalink

Comment has been collapsed.

Always. /s

1 year ago
Permalink

Comment has been collapsed.

Voted NO : the SG community and/or groups may or may not decide to provide means to "clean up" an account. In any case, it should be in the ToS of the site instead of being hidden behind a tricky method involving deletion of the account, then playing Finnish power metal under the full moon, or whatever.
Generally speaking in many (most? all?) countries criminal records shall NOT last forever... But it's not up to the criminal to decide what and when and how to clean up its record ! That's because each and every criminal record shall be cleaned up the same way. This cannot be done on request : it wouldn't be fair.
Back to the good vibes !

1 year ago
Permalink

Comment has been collapsed.

I have not listened to The Metal Opera for some time. Always wanted to make a pen & paper RPG adventure out of it.

1 year ago
Permalink

Comment has been collapsed.

Okay. Not a writer myself, so I just asked the ChatGPT about your idea :

Make a pen and paper RPG adventure from The Metal Opera album by Avantasia. The adventure will feature 15 chapters, one per song of the album. The heroes are expected to advance into an underworld to fight what lies beyond. At first, you will describe shortly the mechanics of the RPG, and provide a summary of each of the fifteen chapters.

And the answer is too long to post here, but worth reading. Although a bit of a cliché, it's already a decent story that may become good with some skills to refine it !

1 year ago
Permalink

Comment has been collapsed.

Thanks :D
Did not think of using ChatGPT this way until now.
Of course it is cliché, lyrics of The Metal Opera 1 & 2 are pure cliché after all.

1 year ago
Permalink

Comment has been collapsed.

I answered no, because we are taking people in groups, not accounts. Sure, there may be exceptions, but I can't see how those exceptions are connected to re-registering on SG.

1 year ago
Permalink

Comment has been collapsed.

I'm just now learning that re-joining is even possible, seems like a major exploit that should be addressed.
About GDPR, if I remember correctly it only really applies to those in the EU, right? Isn't there some sort of legal loophole that could be used to enforce perma-bans?

1 year ago
Permalink

Comment has been collapsed.

from https://www.steamgifts.com/account/privacy/delete-account

You will not be able to register again for one year, or until the date of your last pending suspension, whichever is greater.

With a perma suspended account you cannot simply re-register on sg. This was also confirmed by cg: https://www.steamgifts.com/go/comment/d8MzrGF

1 year ago*
Permalink

Comment has been collapsed.

I don't think users who are permanently suspended/banned can delete their account and rejoin, which (ideally) means the worst of the worst are not able to exploit this. I've thought about deleting my account so I can remove a very bad game (and maybe others) from my library without being punished. Maybe the majority of account recreators have nefarious intentions but certainly not all of them.

1 year ago
Permalink

Comment has been collapsed.

cg confirmed once that with a perma suspended account you cannot simply re-register on sg: https://www.steamgifts.com/go/comment/d8MzrGF

1 year ago*
Permalink

Comment has been collapsed.

Closed 1 year ago by Oppenh4imer.