Privacy Policy
Last Modified: 09.06.2026
This Privacy Policy explains how and under what conditions we process Personal Data of:
1. Definitions
The terms used in this Privacy Policy shall have the following meanings:
Game (WoSB) means the downloadable video game software application titled World of Sea Battle (WoSB), developed and owned by the Licensor, and made available for installation and personal, non-commercial use by the User on compatible devices.
Company, we, or us means Thera Interactive DMCC (Unit №1507, DMCC Business Centre Level No 1, Jewellery & Gemplex 3, Dubai, UAE), license number DMCC-876894, acting as the controller of your Personal Data. The Company processes Personal Data in accordance with the GDPR and other applicable data protection laws.
Personal Data means any information that directly or indirectly relates to you or allows you to be identified.
Privacy Policy means this document, which sets out the data controller’s policy regarding the processing of Personal Data.
You or User means a physical person who meets the eligibility requirements set out in the Terms, is registered in the Game, and is a party to the Terms.
Terms means the User agreement governing the grant of the right to use and the terms of use of the Game, available at worldofseabattle.com/useragreement. This Privacy Policy forms an integral part of the Terms.
Website means the collection of web resources located at the domain worldofseabattle.com and any of its subdomains, which are owned and operated by the Licensor.
2. General rules
2.1. The Game and the Website are intended for Users who have reached the minimum age required by applicable law to independently accept the Terms and are legally authorized to provide their Personal Data and, where required by applicable law, to consent to the processing of such Personal Data. When processing Personal Data, we assume that:
2.3. If you have reason to believe that a third party is using your personal data when interacting with us, please notify us through the Contact form or by email specified in section 10.
2.4. To achieve the purposes set out below, we may collect, record, organize, accumulate, store, update (modify), anonymize, retrieve, use, transfer (provide or grant access to), block, delete, and destroy Personal Data.
3. What data do we collect?
Categories of personal data, purposes, retention periods, and legal bases for processing
3.1. We process personal data using automated means for the following purposes:
Purpose 1: Registration and use of the Game
3.3. Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you. Specifically, we do not use automated anti-cheat systems that issue automatic bans, account suspensions, or terminations without human intervention. Any decisions regarding rule violations or account restrictions are strictly reviewed and made by our moderation team.
4. Cookies
4.1. To ensure the proper functioning of the Website and to improve the user experience, we process cookies that enable us to monitor user activity and engagement.
4.2. We use the following types of cookies:
Strictly Necessary (Technical) Cookies are required for the operation of the Website. You may configure your browser to block these cookies; however, if you do so, certain parts of the Website may not function properly.
Cookie Name, Description and Retention Period
Strictly Necessary cookies are placed automatically as they are essential for the Website to function. However, Analytics and Conversion Tracking cookies are not placed on your device unless you explicitly consent to them (opt-in).
You can manage your cookie preferences, including withdrawing your consent for non-essential cookies at any time, through our cookie settings available on the Website. You may also adjust your browser settings to block or delete cookies. Please note that disabling Strictly Necessary cookies may prevent you from using the Website or negatively affect its functionality.
4.4. To analyze user activity, we use the Google Analytics web analytics service. Detailed information about the data collected and processed by these services is available in their respective privacy policies:
Google Privacy Policy: https://policies.google.com/privacy.
4.5. Please note that Personal Data collected through cookies and similar analytics technologies may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we implement appropriate safeguards in accordance with applicable data protection laws.
5. Users Rights
5.1. Users are entitled to the following rights under applicable data protection laws:
5.3. Users may exercise their rights by submitting a request through the Contact form or by email specified in section 10.
5.4. Users should provide sufficient information to allow us to identify them and respond to their request. Where necessary, we may request additional information to verify the User's identity.
6. Sharing of Personal Data (Categories of Recipients)
6.1. However, to provide the Game, process your transactions, and analyze Website performance, we may share your data with the following categories of third-party service providers:
7. International Data Transfers
The Company is headquartered in the United Arab Emirates (UAE). Therefore, the Personal Data we collect from you, including if you are a resident of the European Economic Area (EEA), will be transferred to and processed in the UAE.
Additionally, our third-party service providers (such as Valve Corporation, Xsolla, and Google) are primarily located in the United States.
When we transfer your Personal Data outside the EEA to countries that have not been deemed to provide an adequate level of data protection by the European Commission, we ensure that appropriate safeguards are in place to protect your data as required by the GDPR. These safeguards include:
By using the Game and the Website, you acknowledge that your Personal Data may be transferred to and processed in these jurisdictions. You may request more information about the transfer mechanisms we rely on by contacting us.
8. Children’s Privacy
Our Game and Website are not directed to, or intended for, children under the age of 13 (for US residents) or under the age of digital consent in their respective jurisdictions (which varies between 13 and 16 years of age within the European Economic Area).
We do not knowingly collect, maintain, or process Personal Data from children under these age thresholds. If you are under the required age in your country, please do not attempt to register an account for the Game, use our Website, or send any Personal Data about yourself to us.
If we discover or have reason to believe that we have inadvertently collected Personal Data from a child under the applicable legal age without verifiable parental consent, we will take immediate steps to delete that information from our systems and terminate the associated account.
Information for Parents and Guardians: If you are a parent or legal guardian and you believe that your child has created an account or provided us with Personal Data without your consent, please contact us immediately through the Contact form or by email specified in section 10. Upon verification, we will promptly delete the child's data from our records to ensure compliance with COPPA, GDPR, and other applicable children's privacy laws.
This Privacy Policy explains how and under what conditions we process Personal Data of:
- Users of the World of Sea Battle video game (WoSB);
- Visitors to the worldofseabattle.com website (the “Website”).
1. Definitions
The terms used in this Privacy Policy shall have the following meanings:
Game (WoSB) means the downloadable video game software application titled World of Sea Battle (WoSB), developed and owned by the Licensor, and made available for installation and personal, non-commercial use by the User on compatible devices.
Company, we, or us means Thera Interactive DMCC (Unit №1507, DMCC Business Centre Level No 1, Jewellery & Gemplex 3, Dubai, UAE), license number DMCC-876894, acting as the controller of your Personal Data. The Company processes Personal Data in accordance with the GDPR and other applicable data protection laws.
Personal Data means any information that directly or indirectly relates to you or allows you to be identified.
Privacy Policy means this document, which sets out the data controller’s policy regarding the processing of Personal Data.
You or User means a physical person who meets the eligibility requirements set out in the Terms, is registered in the Game, and is a party to the Terms.
Terms means the User agreement governing the grant of the right to use and the terms of use of the Game, available at worldofseabattle.com/useragreement. This Privacy Policy forms an integral part of the Terms.
Website means the collection of web resources located at the domain worldofseabattle.com and any of its subdomains, which are owned and operated by the Licensor.
2. General rules
2.1. The Game and the Website are intended for Users who have reached the minimum age required by applicable law to independently accept the Terms and are legally authorized to provide their Personal Data and, where required by applicable law, to consent to the processing of such Personal Data. When processing Personal Data, we assume that:
- You have read this Privacy Policy and fully understand and accept its terms;
- You provide and use your own Personal Data.
2.3. If you have reason to believe that a third party is using your personal data when interacting with us, please notify us through the Contact form or by email specified in section 10.
2.4. To achieve the purposes set out below, we may collect, record, organize, accumulate, store, update (modify), anonymize, retrieve, use, transfer (provide or grant access to), block, delete, and destroy Personal Data.
3. What data do we collect?
Categories of personal data, purposes, retention periods, and legal bases for processing
3.1. We process personal data using automated means for the following purposes:
Purpose 1: Registration and use of the Game
- Categories of Personal Data: name (or in-game nickname) and email
- Legal basis for processing: performance of the Terms to which you are a party
- Retention period: Personal Data will be deleted within 30 calendar days after the deletion of the User's account or the discontinuation of the Game, whichever occurs first
- Categories of Personal Data: name (or in-game nickname) and email
- Legal basis for processing: performance of the Terms to which you are a party or the Controller’s legitimate interests (to ensure a safe, fair, and fraud-free gaming environment).
- Retention period: Personal Data will be deleted within 30 calendar days after the deletion of the User's account or the discontinuation of the Game, whichever occurs first
- Categories of Personal Data: name (or in-game nickname) and email
- Legal basis for processing: performance of the Terms to which you are a party or the Controller’s legitimate interests (to provide quality customer support).
- Retention period: Personal Data will be deleted within 30 calendar days after the matter has been resolved.
- Categories of Personal Data: name (or nickname), email address, and gameplay data
- Legal basis for processing: the Controller’s legitimate interests (to enhance user experience, fix bugs, and develop new features)
- Retention period: Personal Data will be deleted within 30 calendar days after the deletion of the User's account or the discontinuation of the Game, whichever occurs first
- Categories of Personal Data: surname, first name, patronymic (if provided), age, city and country of residence, contact details (including your Discord username and an alternative contact method, such as Telegram or WhatsApp), language skills (including the languages you speak and your proficiency level) and any other information you choose to provide, such as details of relevant experience, skills, or a personal description
- Legal basis for processing: your consent, which is given by clicking the “Submit” button when submitting the “Join the WoSB Crew” form on the Website
- Retention period: Personal Data will be deleted within 30 calendar days after a decision regarding your application has been made. We will make such decision within 6 months of receiving your application
3.3. Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you. Specifically, we do not use automated anti-cheat systems that issue automatic bans, account suspensions, or terminations without human intervention. Any decisions regarding rule violations or account restrictions are strictly reviewed and made by our moderation team.
4. Cookies
4.1. To ensure the proper functioning of the Website and to improve the user experience, we process cookies that enable us to monitor user activity and engagement.
4.2. We use the following types of cookies:
Strictly Necessary (Technical) Cookies are required for the operation of the Website. You may configure your browser to block these cookies; however, if you do so, certain parts of the Website may not function properly.
Cookie Name, Description and Retention Period
- ssr-caching — indicates how the Website was rendered. Retention period: less than 1 minute
- XSRF-TOKEN, hs — enhance the security of the Website by preventing cross-site request forgery (CSRF) attacks. Retention period: session
- svSession — identifies unique Website Users and tracks User sessions on the Website. Retention period: 1 year 1 month and 4 days
- wixAB3 — collects information about Website traffic, session duration, and User location. Retention period: 6 months
- Analytics Cookies help us understand which pages of the Website are the most and least visited, as well as how Users navigate through the Website. If these cookies are disabled, we will not be able to determine whether a User has visited the Website and downloaded the Game, nor will we be able to measure the Website’s performance and effectiveness.
- Cookie Name, Description and Retention Period
- _ga_* — store and count page views. Retention period: 1 year and 1 month and 4 days
- _ga — calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. Retention period: 1 year 1 month and 4 days
- Conversion Tracking Cookies are used strictly to measure the performance and effectiveness of our user acquisition campaigns.
- _gcl_au — experiment advertisement efficiency of websites using their services. Retention period: 3 months
- receive-cookie-deprecation — enable Privacy Sandbox testing and preview how site behaviour and functionality work without third-party cookies. Retention period: 1 year
Strictly Necessary cookies are placed automatically as they are essential for the Website to function. However, Analytics and Conversion Tracking cookies are not placed on your device unless you explicitly consent to them (opt-in).
You can manage your cookie preferences, including withdrawing your consent for non-essential cookies at any time, through our cookie settings available on the Website. You may also adjust your browser settings to block or delete cookies. Please note that disabling Strictly Necessary cookies may prevent you from using the Website or negatively affect its functionality.
4.4. To analyze user activity, we use the Google Analytics web analytics service. Detailed information about the data collected and processed by these services is available in their respective privacy policies:
Google Privacy Policy: https://policies.google.com/privacy.
4.5. Please note that Personal Data collected through cookies and similar analytics technologies may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we implement appropriate safeguards in accordance with applicable data protection laws.
5. Users Rights
5.1. Users are entitled to the following rights under applicable data protection laws:
- Right of access. Users have the right to obtain confirmation as to whether their Personal Data are being processed and, where that is the case, access to such Personal Data.
- Right to rectification. Users have the right to request the correction of inaccurate Personal Data and the completion of incomplete Personal Data.
- Right to erasure. Users have the right to request the deletion of their Personal Data in the cases provided for by applicable law.
- Right to restriction of processing. Users have the right to request restriction of the processing of their Personal Data in the cases provided for by applicable law.
- Right to object. Users have the right to object to the processing of their Personal Data where such processing is based on legitimate interests or otherwise permitted by applicable law.
- Right to data portability. Users have the right to receive their Personal Data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible and legally applicable.
- Right to withdraw consent. Where processing is based on consent, Users have the right to withdraw such consent at any time.
- Right to lodge a complaint. Users have the right to lodge a complaint with a competent data protection supervisory authority in their country of habitual residence, place of work, or the place of the alleged infringement if they believe that the processing of their Personal Data infringes applicable data protection laws.
5.3. Users may exercise their rights by submitting a request through the Contact form or by email specified in section 10.
5.4. Users should provide sufficient information to allow us to identify them and respond to their request. Where necessary, we may request additional information to verify the User's identity.
6. Sharing of Personal Data (Categories of Recipients)
6.1. However, to provide the Game, process your transactions, and analyze Website performance, we may share your data with the following categories of third-party service providers:
- Payment Processors and Merchants of Record: We use third-party services, such as Xsolla and Valve Corporation (Steam), to securely process your in-game purchases. Please note that we do not collect or store your credit card details or other financial data. These providers process your payment information in accordance with their own privacy policies. We only receive confirmation of the transaction and the associated account identifier.
- Authentication Partners: If you choose to log in to the Game or the Website using your Steam account, Valve Corporation will share certain basic account information (such as your Steam ID and profile name) with us to authenticate you and create or link your Game account.
- Web Analytics Providers: As described in Section 4, we use Google Analytics to monitor Website activity.
- Infrastructure and IT Service Providers: Currently, Game data is processed on the Company's internal infrastructure. If we engage third-party cloud hosting providers to store data or operate the Game in the future, we will only use reliable providers bound by strict data processing agreements.
- Legal and Regulatory Authorities: We may disclose your Personal Data if required to do so by law, court order, or to protect the rights, property, or safety of the Company, our Users, or others.
7. International Data Transfers
The Company is headquartered in the United Arab Emirates (UAE). Therefore, the Personal Data we collect from you, including if you are a resident of the European Economic Area (EEA), will be transferred to and processed in the UAE.
Additionally, our third-party service providers (such as Valve Corporation, Xsolla, and Google) are primarily located in the United States.
When we transfer your Personal Data outside the EEA to countries that have not been deemed to provide an adequate level of data protection by the European Commission, we ensure that appropriate safeguards are in place to protect your data as required by the GDPR. These safeguards include:
- Implementing Standard Contractual Clauses (SCCs) approved by the European Commission in our agreements with third-party service providers.
- Relying on the EU-U.S. Data Privacy Framework (DPF) for transfers to certified providers located in the United States.
By using the Game and the Website, you acknowledge that your Personal Data may be transferred to and processed in these jurisdictions. You may request more information about the transfer mechanisms we rely on by contacting us.
8. Children’s Privacy
Our Game and Website are not directed to, or intended for, children under the age of 13 (for US residents) or under the age of digital consent in their respective jurisdictions (which varies between 13 and 16 years of age within the European Economic Area).
We do not knowingly collect, maintain, or process Personal Data from children under these age thresholds. If you are under the required age in your country, please do not attempt to register an account for the Game, use our Website, or send any Personal Data about yourself to us.
If we discover or have reason to believe that we have inadvertently collected Personal Data from a child under the applicable legal age without verifiable parental consent, we will take immediate steps to delete that information from our systems and terminate the associated account.
Information for Parents and Guardians: If you are a parent or legal guardian and you believe that your child has created an account or provided us with Personal Data without your consent, please contact us immediately through the Contact form or by email specified in section 10. Upon verification, we will promptly delete the child's data from our records to ensure compliance with COPPA, GDPR, and other applicable children's privacy laws.
9. Miscellaneous
9.1. Protection of Personal Data. We implement appropriate technical and organizational measures (such as encryption and access controls) to protect your Personal Data against unauthorized access, loss, or destruction.
9.2. We shall not be liable for the actions of third parties who gain access to a User’s Personal Data as a result of the User’s own actions or failure to maintain the confidentiality of their credentials or devices.
9.3. We reserve the right to amend or update this Privacy Policy at any time. Where required by applicable law or where the changes are material, we will notify Users of such changes by means reasonably available to us.
9.4. The updated version of this Privacy Policy shall enter into force upon its publication, unless otherwise provided in the updated version.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy, your Personal Data, or if you wish to exercise your data subject rights, please contact us using the information provided below.
Data Controller: Thera Interactive DMCC
Address: Unit № 1507, DMCC Business Centre Level No 1, Jewellery & Gemplex 3, Dubai, UAE
Email: privacy@therainteractive.com
Contact Form: Contact form
11. Supplemental Privacy Notice for U.S. State Residents (including California)
This section applies solely to residents of the United States (including California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws) and supplements the information contained in the rest of this Privacy Policy. This notice is designed to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA"), and other applicable state privacy regulations.
11.1. Information We Collect (12-Month Lookback)
In the preceding 12 months, we have collected, and may continue to collect, the following categories of Personal Information from our Users:
Category of Personal Information | Specific Examples Collected | Sources | Business/Commercial Purpose |
Identifiers | Name, in-game nickname, email, IP address, unique device ID, Steam ID. | Directly from you; Automatically; Steam. | Account creation, game access, security, fraud prevention. |
Commercial Information | Purchase confirmation, transactional history in the Game. | Steam; Xsolla. | Granting in-game items, transaction verification, tracking revenue. |
Internet / Electronic Network Activity | Gameplay data, logs, browsing history on our Website, cookie data. | Automatically via game client and Website. | Game development, bug fixing, website performance optimization. |
11.2. Disclosures, "Sale," and "Sharing" of Personal Information
- Disclosures for a Business Purpose: In the preceding 12 months, we have disclosed the categories of Personal Information listed above to our service providers (such as Xsolla, Steam, and Google Analytics) for legitimate business purposes, as detailed in Section 6.
- We Do Not Sell or Share Your Data: We do not sell your Personal Information to any third parties for monetary compensation. Furthermore, under California law (CCPA/CPRA), we do not "share" your Personal Information with third parties for cross-context behavioral advertising. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.
Depending on your state of residence, you may have some or all of the following rights:
- Right to Know / Access: The right to request that we disclose what Personal Information we collect, use, disclose, and "share" about you.
- Right to Delete: The right to request the deletion of your Personal Information collected or maintained by us.
- Right to Correct: The right to request the correction of inaccurate Personal Information we maintain about you.
- Right to Opt-Out of Sale or Sharing: The right to direct us not to "sell" or "share" your Personal Information for targeted advertising.
- Right to Non-Discrimination: We will not discriminate against you (e.g., by denying access to the Game or charging different prices) for exercising any of your privacy rights.
To exercise your U.S. state privacy rights (such as the right to access, delete, or correct your data), please submit a verifiable consumer request to us via our Contact form or by emailing us at privacy@therainteractive.com.
Only you, or a person legally authorized to act on your behalf, may make a request related to your Personal Information. We will confirm receipt of your request and respond within the timeline, as required by applicable law.