Grid App Studio · Sea Battle

Privacy policy

Last updated: 29 October 2026

Sea Battle is a naval battle game for phones, made and published by me, Vazken Abdulian, an individual developer, under the name Grid App Studio. This page explains what information the app and its game server use, why, where it goes and how long it is kept.

On your phone

The app keeps a few things on your phone so it works the same way next time:

• a random player id (20 characters) and a random secret (32 characters), made on your phone the first time you open the app. They are not tied to your name, phone number, email address or any account;
• your nickname, if you set one (up to 16 characters);
• your settings: sound, vibration, camera view, ship colour and the looks you picked for your ships and shots;
• the code of the last online room you played in, so you can rejoin it;
• your chat choices: the players you've blocked, whether chat is turned off, and that you agreed to the chat rules.

Sound and vibration work entirely on your phone. Uninstalling the app deletes all of the above, and on Android so does clearing the app's storage in Settings. If your phone backs up app data (for example to your Google account or iCloud), that backup may hold a copy too; it is kept by Google or Apple under your account, not by me.

Games against bots

Games against bots run entirely on your phone. They don't use the internet and send nothing.

Online rooms

When you create or join an online room, the app connects to the game server and sends it:

• your player id and secret;
• your nickname, ship colour and the looks you picked for your ships and shots;
• what you do in the game, such as where you place your ships and which cells you fire at;
• chat messages you write in the room (up to 200 characters each).

This is used only to run the room. Your id keeps your seat, and your secret proves that a phone reconnecting to that seat is yours, so nobody else can take it. The other players in the room see your nickname, ship colour and looks, and their apps also receive your player id, but never your secret.

Chat. Online rooms with at least two people have a chat. Everything you write there is seen by everyone in the room, on both teams. Don't share personal information in it. Before a message or nickname is stored, the server replaces offensive words with asterisks and hides links, email addresses and phone numbers, and it refuses nicknames that are offensive or contain contact details. You can block a player, which hides their messages on your phone only, or turn chat off in Settings. The full chat rules explain what isn't allowed.

Reports. When you report a player, the server sends me an email with the room code, the reason you picked, your nickname and player id, the reported player's nickname and player id, and the room's latest chat (up to 30 messages). The reported player isn't told who reported them. I use reports only to deal with abuse, and delete them within 90 days. When enough players in a room report someone, that player's chat is switched off for the rest of the room and their messages are removed. If someone seriously breaks the chat rules, I may add their player id to a ban list on the server, which stops that id from playing online. The list holds only the ids, and each one is removed within 12 months.

Connections are encrypted (HTTPS and secure WebSockets). Your id, secret, nickname and colour travel in the request that creates a room and in the address (URL) the app uses to connect to one.

Like any server, the game server sees your IP address when you connect. Apart from the logs described below, it uses it only to limit how many rooms one address can create and join in a minute, to stop abuse. That count is kept only briefly in the server's memory and is never saved.

If you invite friends, the app opens your phone's share sheet with the room code, and you choose where it goes.

Where it is stored, and for how long

• Rooms. Each room is stored on Cloudflare's servers (in Cloudflare Durable Objects). It holds the game: each player's id, secret, nickname, colour and looks, the boards, moves and scores, the room's chat (its latest 60 messages) and which players reported whom. A room and everything in it is deleted automatically 3 hours after the last activity (the last time anyone joined it or did something in the game).
• Server logs. Cloudflare keeps logs of requests to the game server, which I use to find bugs and abuse. The server is set up to remove the part of each address that carries your id, secret, nickname and colour, so the logs don't contain them. They may contain other request details, such as your IP address, your country and the time. Logs are kept for up to 7 days.
• Reports. Emailed to me when you or someone else reports a player, and kept in my Gmail inbox (Google) for up to 90 days.
• Ban list. The player ids of people who seriously broke the chat rules, kept as a setting of the game server for up to 12 months.

There is no player database. Apart from those logs and the ban list, nothing about you stays on the server once a room is deleted, and reports are kept only in my email for up to 90 days. Cloudflare runs data centres around the world, so this data may be handled outside your country.

Who else handles it

The game server is hosted by Cloudflare, Inc. (Cloudflare Workers), which stores and processes the data above on my behalf to run the server. Cloudflare's own privacy policy is at cloudflare.com/privacypolicy.

If you email me, Cloudflare Email Routing forwards your message to my Gmail inbox, provided by Google, and I use it only to answer you. Player reports reach the same inbox.

Apart from Cloudflare, Google (only for emails and reports) and the other players in your room, nobody receives your data. I don't sell it, and I don't share it with anyone for advertising. Cloudflare and Google handle the data only on my behalf, under their own privacy and data protection terms, and give it protection at least equal to this policy.

What the app doesn't do

• No accounts or sign-in.
• No ads, analytics or tracking, and no third-party code that collects data.
• No access to your location, contacts, photos, camera or microphone.

Deleting your data

On your phone: uninstall the app or, on Android, clear its storage in Settings.

On the server: rooms delete themselves 3 hours after the last activity, and logs within 7 days, so you don't need to do anything. Reports are deleted within 90 days, and ids on the ban list within 12 months. If you'd like something deleted sooner, or want to know what is held about you, email me at hello@gridappstudio.com. There are no accounts to look you up by, so please include your nickname and the room code if you have them. I'll delete what I can find and let you know.

Changing your mind: you can stop sharing data at any time. Play against bots only (nothing is sent), turn chat off in Settings, or uninstall the app, and email me to have anything still held about you deleted sooner.

Depending on where you live, you may have other rights over your data too, such as getting a copy of it or complaining to your local data protection authority. Email me about any of them.

Children

Sea Battle is not directed at children under 13, and I don't knowingly collect personal information from children under 13. If you think a child under 13 has shared personal information in the game, for example their real name as a nickname, email me and I'll delete it.

Changes to this policy

If the app or the server ever handles data differently, I'll update this page, and the date at the top, before that version is released.

Contact

Vazken Abdulian, Grid App Studio
hello@gridappstudio.com