Pascal Goedde, operating under the name “Verse Digital”, Solomou Solomou 10, Emba, Paphos 8250, Cyprus ("HeadBox," "we," "us," or "our"), operates the HeadBox website and the HeadBox game, currently in development, with an open waitlist and an upcoming Founder Access subscription. This Policy explains, in plain terms, which cookies we use and how you can control them.

We keep our use of cookies deliberately small. We ask for your consent before placing anything that is not strictly necessary, and you can change your mind at any time.

This Policy should be read alongside our Privacy Policy. Founder Access will be purchased in the game through Xsolla, and any cookies set during Xsolla's checkout will be governed by Xsolla's own policies.

A cookie is a small text file that a website saves on your device. It lets the site remember things between pages and between visits — for example, that you are signed in, or which language you chose.

Session cookies are deleted as soon as you close your browser. Persistent cookies stay for a set period, or until you delete them.

Where this Policy says "cookies," it also covers your browser's local and session storage, which we use in the same way and for the same purposes.

We use three categories. Only the first is placed automatically; the other two require your consent.

Strictly Necessary Cookies

These are required for the site to work and cannot be switched off. They cover keeping you signed in, protecting forms and sessions against common web attacks, and remembering your cookie choices so you are not asked on every visit.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).

Analytics Cookies — Google Analytics

We use Google Analytics to understand how the site is used: which pages people visit, how they arrive, and where things break. This tells us what to fix and what to build next during development. The data is aggregated and is not used to identify you personally.

Google acts as our analytics provider and sets its own cookies. See Google's privacy policy for details of how it handles this data.

Legal basis: Consent (Art. 6(1)(a) GDPR). Placed only if you accept analytics cookies.

Functional Cookies

Where used, these remember preferences such as language and display settings so the site behaves consistently. They are optional, and declining them only means some preferences reset between visits.

Legal basis: Consent (Art. 6(1)(a) GDPR).

We do not use cookies for advertising, and we do not sell or share cookie data with third parties for marketing purposes.

On your first visit you will see our cookie banner, with three options:

• Accept All — allow analytics and functional cookies as well as the strictly necessary ones;
• Reject Non-Essential — allow only strictly necessary cookies. The site will still work normally;
• Manage Preferences — category-by-category controls are not yet available; until they are, please use Accept All or Reject Non-Essential.

Your choice is stored in your browser's local storage and applied on later visits. To change it, clear this site's stored data in your browser (see Section 5); the banner will then appear again on your next visit.

Withdrawing consent does not affect anything processed while consent was active. Preferences are stored per browser and per device, so you may need to set them again elsewhere.

You can also manage cookies directly in your browser, where you can view and delete stored cookies, block them, or browse in private mode.

• Chrome: Settings → Privacy and Security → Cookies and other site data;
• Firefox: Settings → Privacy & Security → Cookies and Site Data;
• Safari: Preferences → Privacy → Manage Website Data;
• Edge: Settings → Cookies and site permissions.

Blocking strictly necessary cookies will stop parts of the site working — you may be unable to stay signed in, and your preferences will not be saved.

Strictly necessary cookies are placed on the basis of our legitimate interests (Art. 6(1)(f) GDPR), because the site cannot operate securely without them.

Analytics and functional cookies are placed only with your consent (Art. 6(1)(a) GDPR), which is freely given, specific, and informed, and which you can withdraw at any time.

Cookie placement is also governed by the European ePrivacy Directive, as implemented in Cyprus through national electronic communications law. We do not set non-essential cookies before you have given consent.

• Session cookies — deleted when you close your browser;
• Your cookie choice — kept in your browser until you clear this site's stored data;
• Analytics cookies — for the period set by our Google Analytics configuration; see Google's privacy policy for details.

Data already collected is kept only as long as needed for the purpose it was gathered for, and analytics data is held in aggregate. Full details are in our Privacy Policy.

HeadBox is in active development, so this Policy may change as the platform does. If we make a material change — such as adding a new cookie category — we will tell you through the site and, where required, ask for your consent again.

Minor clarifications may be made without notice. The date at the top of this page shows when it was last revised.

For any question about this Policy or the cookies we use:

• Data Controller: Pascal Goedde, operating under the name “Verse Digital”, Solomou Solomou 10, Emba, Paphos 8250, Cyprus
• Privacy & Cookie Enquiries: info@verse-digital.net, or via our Help Centre
• Website: verse-digital.net

We aim to answer promptly, and within one month for requests made under the GDPR. If you are not satisfied with our response, you may complain to a data protection authority — the Commissioner for Personal Data Protection in Cyprus, or the data protection authority of the EU country where you live, work, or where you believe an infringement took place.