• orgrinrt@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    11 months ago

    The obvious solution would be to take some token as an argument to the api calls that is private to the user, which would signify a consent to share also the hidden data.

    I think there already is a token like this for steam item trading, in case your profile is private?

    I.e if you don’t provide that argument, share only public stuff to the caller. If you do, it’s a explicit choice by you, since you are required to provide your credentials in some form of a token.