Cookie Policy

Verse Digital GmbH ("HeadBox," "we," "us," or "our") operates the HeadBox website and the HeadBox game, currently available as an Early Access / Public Demo release. This Policy explains, in plain terms, which cookies we use and how you can control them.

We keep our use of cookies deliberately small. We ask for your consent before placing anything that is not strictly necessary, and you can change your mind at any time.

This Policy should be read alongside our Privacy Policy.

A cookie is a small text file that a website saves on your device. It lets the site remember things between pages and between visits — for example, that you are signed in, or which language you chose.

Session cookies are deleted as soon as you close your browser. Persistent cookies stay for a set period, or until you delete them.

Where this Policy says "cookies," it also covers your browser's local and session storage, which we use in the same way and for the same purposes.

We use three categories. Only the first is placed automatically; the other two require your consent.

Strictly Necessary Cookies

These are required for the site to work and cannot be switched off. They cover keeping you signed in, protecting forms and sessions against common web attacks, and remembering your cookie choices so you are not asked on every visit.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).

Analytics Cookies — Google Analytics

We use Google Analytics to understand how the site is used: which pages people visit, how they arrive, and where things break. This tells us what to fix and what to build next during Early Access. The data is aggregated and is not used to identify you personally.

Google acts as our analytics provider and sets its own cookies. See Google's privacy policy for details of how it handles this data.

Legal basis: Consent (Art. 6(1)(a) GDPR). Placed only if you accept analytics cookies.

Functional Cookies

Where used, these remember preferences such as language and display settings so the site behaves consistently. They are optional, and declining them only means some preferences reset between visits.

Legal basis: Consent (Art. 6(1)(a) GDPR).

We do not use cookies for advertising, and we do not sell or share cookie data with third parties for marketing purposes.

On your first visit you will see our cookie banner, with three options:

• Accept All — allow analytics and functional cookies as well as the strictly necessary ones;
• Reject Non-Essential — allow only strictly necessary cookies. The site will still work normally;
• Manage Preferences — choose category by category.

Your choice is stored in a cookie and applied on later visits. You can change it at any time using the cookie settings link in the site footer.

Withdrawing consent does not affect anything processed while consent was active. Preferences are stored per browser and per device, so you may need to set them again elsewhere.

You can also manage cookies directly in your browser, where you can view and delete stored cookies, block them, or browse in private mode.

• Chrome: Settings → Privacy and Security → Cookies and other site data;
• Firefox: Settings → Privacy & Security → Cookies and Site Data;
• Safari: Preferences → Privacy → Manage Website Data;
• Edge: Settings → Cookies and site permissions.

Blocking strictly necessary cookies will stop parts of the site working — you may be unable to stay signed in, and your preferences will not be saved.

Strictly necessary cookies are placed on the basis of our legitimate interests (Art. 6(1)(f) GDPR), because the site cannot operate securely without them.

Analytics and functional cookies are placed only with your consent (Art. 6(1)(a) GDPR), which is freely given, specific, and informed, and which you can withdraw at any time.

Cookie placement is also governed by the European ePrivacy Directive, implemented in Germany through the TDDDG. We do not set non-essential cookies before you have given consent.

• Session cookies — deleted when you close your browser;
• Consent and preference cookies — up to 12 months, so we do not have to keep asking;
• Analytics cookies — up to 14 months, after which identifiers expire.

Data already collected is kept only as long as needed for the purpose it was gathered for, and analytics data is held in aggregate. Full details are in our Privacy Policy.

HeadBox is in active development, so this Policy may change as the platform does. If we make a material change — such as adding a new cookie category — we will tell you through the site and, where required, ask for your consent again.

Minor clarifications may be made without notice. The date at the top of this page shows when it was last revised.

For any question about this Policy or the cookies we use:

• Data Controller: Verse Digital GmbH
• Privacy & Cookie Enquiries: via our Help Centre
• Website: www.verse-digital.de

We aim to answer promptly, and within one month for requests made under the GDPR. If you are not satisfied with our response, you may complain to your national data protection authority — in Germany, the supervisory authority of the relevant federal state.