Privacy Policy

Effective Date: July 2026 | Last Revised: July 2026

1. Introduction

Mirage Studios UAE, a game studio owned and operated by Mohammed Jawad Anbari, with principal operations in Abu Dhabi, United Arab Emirates and incorporated as a Limited Liability Company domiciled in the United States ("Mirage Studios", "we", "us", or "our"), is committed to protecting the personal information of visitors to our website and players of our games, including Veil of the Twisted Sands.

This Privacy Notice explains what personal data we collect, how we use and store it, with whom we may share it, your rights in relation to that data, and how to contact us with questions or complaints.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Notice. If you do not agree with its terms, please discontinue use of our services.

2. Data Controller

The data controller responsible for your personal information is:

Mirage Studios UAE

Owner: Mohammed Jawad Anbari

Abu Dhabi, United Arab Emirates

Email: admin@miragestudios.ae

Where relevant, our LLC entity registered in the United States may act as co-controller for users accessing our services from that jurisdiction.

3. Personal Data We Collect

3.1 Information You Provide

  • Name, email address, and contact details when you register an account or contact us;

  • Username, avatar, and profile preferences you set within our games or platform;

  • Billing details and payment method information processed via our authorised payment service providers (we do not store full card details);

  • Communications you send us, including support requests, feedback, and contest entries.

3.2 Information We Collect Automatically

  • IP address, browser type, operating system, and device identifiers;

  • Pages visited, features used, session duration, and in-game behaviour logs;

  • Cookie and tracking technology data (see Section 6 below);

  • Error reports and crash logs to help us diagnose technical issues.

3.3 Information from Third Parties

  • Authentication data if you sign in via a third-party platform (e.g., Google, Apple, Discord);

  • Public profile information from linked social accounts, limited to what you expressly authorise.

4. Legal Bases for Processing

We process your personal data on the following legal bases:

  • Performance of a contract — to create and manage your account and deliver our services;

  • Legitimate interests — to improve our products, prevent fraud, and maintain security, where such interests are not overridden by your rights;

  • Consent — for optional marketing communications and non-essential cookies (you may withdraw consent at any time);

  • Legal obligation — to comply with applicable law in the UAE, the United States, and other relevant jurisdictions.

5. How We Use Your Data

  • Creating and managing user accounts;

  • Providing, maintaining, and improving our games and website;

  • Processing payments and managing subscriptions;

  • Sending transactional communications (receipts, security alerts, service updates);

  • Sending marketing communications where you have opted in;

  • Detecting and preventing cheating, fraud, and abuse;

  • Complying with legal and regulatory requirements;

  • Conducting analytics to understand and improve user experience.

6. Cookies & Tracking Technologies

We use cookies and similar technologies, including:

  • Strictly necessary cookies — required for our website to function;

  • Analytics cookies — to understand how users interact with our site (e.g., Google Analytics);

  • Preference cookies — to remember your settings and choices;

  • Marketing cookies — only where you have given explicit consent.

You may manage your cookie preferences through our Cookie Consent banner or through your browser settings. Disabling certain cookies may affect website functionality.

7. Data Sharing & Disclosure

We do not sell your personal data. We may share data with:

  • Service providers and sub-processors (hosting, payment processing, analytics, customer support) under data processing agreements;

  • Gaming platform partners (e.g., Steam, consoles) where you access our games through their services;

  • Legal and regulatory authorities where required by applicable law;

  • Acquirers or successors in the event of a merger, acquisition, or sale of assets (with advance notice).

8. International Data Transfers

As a company with operations in both the UAE and the United States, your data may be transferred across international borders. Where data is transferred outside the UAE or European Economic Area, we implement appropriate safeguards including standard contractual clauses or equivalent mechanisms recognised under applicable law.

9. Data Retention

We retain personal data for as long as necessary to fulfil the purposes set out in this Notice, or as required by law. Account data is retained for the duration of your account and for a period thereafter in accordance with applicable legal obligations. You may request deletion at any time (see Section 11).

10. Security

We employ industry-standard technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission, access controls, and regular security reviews. No system is entirely secure; we encourage you to use strong passwords and to notify us immediately of any suspected unauthorised access.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access — request a copy of the personal data we hold about you;

  • Rectification — request correction of inaccurate data;

  • Erasure — request deletion of your data ('right to be forgotten');

  • Restriction — request that we limit processing of your data;

  • Portability — receive your data in a structured, machine-readable format;

  • Objection — object to processing based on legitimate interests or for direct marketing;

  • Withdraw Consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at admin@miragestudios.ae. We will respond within the timeframe required by applicable law (generally 30 days).

12. Children's Privacy

Our services are not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data without appropriate consent, please contact us immediately and we will take steps to delete it.

13. Third-Party Links

Our website may contain links to third-party websites or services. This Privacy Notice does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access.

14. Changes to This Notice

We may update this Privacy Notice from time to time. Material changes will be communicated via our website or by email. Continued use of our services after the updated Notice takes effect constitutes your acceptance of the revised terms.

15. Contact & Complaints

For questions or concerns regarding this Privacy Notice or our data practices, contact:

Mirage Studios UAE — Data Enquiries

Email: admin@miragestudios.ae

Address: Abu Dhabi, United Arab Emirates

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.