Privacy Policy

1. Who we are

This privacy policy covers the website learn3d.ai and its sub-routes, including learn3d.ai/ai-x-3d and learn3d.ai/ai-x-3d-environments.

The data controller is:

3D SNM Co., Ltd.
Floor 4, 6, Heukgyo-ro 109beon-gil
Seo-gu, Busan 49223, South Korea
Email: hello@learn3d.ai
Director: Stefan Vaskevich
Corporate website: snm3dcorp.com

learn3d.ai is a brand operated by 3D SNM Co., Ltd. The same controller also operates Top3D.ai. Both platforms are listed on the corporate website above, which you can use to verify who is behind this site.

Note: the subdomain course.learn3d.aiis operated by Teachable, Inc. on our behalf and is governed by Teachable's own privacy policy (teachable.com/privacy-policy). When you purchase a course or log in to view course content, that flow happens on Teachable's infrastructure under their terms.

2. What data we collect on learn3d.ai

We collect a limited amount of data on the public website.

If you are visiting from the EEA, UK, Switzerland, certain associated territories, or a region we cannot determine, and you have no stored choice, browser analytics and advertising stay denied until you click Accept. If you are visiting from another region and have no stored choice, those services are enabled by the site's regional default unless your browser sends a Global Privacy Control (GPC) signal. A stored choice takes precedence over the regional default and GPC: Accept grants consent and Decline keeps these services denied. You can change the stored choice through Cookie settings in the site footer.

Cookieless usage analytics (via Vercel Web Analytics):

• Page views (which pages you visit and when)
• Anonymized referrer (where you came from)
• Approximate location (country / region, derived from IP per Vercel's analytics pipeline; Vercel does not store IP addresses; see vercel.com/docs/analytics/privacy)
• Browser type and operating system
• Device type (mobile / tablet / desktop)

Vercel Web Analytics does not use cookies and does not track you across sites. The legal basis under GDPR Art. 6(1)(f) is our legitimate interest in understanding how the site is used so we can improve it.

Browser-based analytics (via Google Analytics 4):

We also use browser-based Google Analytics 4 (GA4, operated by Google LLC) to measure how visitors discover the course, how they navigate the site, and which pages convert into course sign-ups. This helps us improve the site and decide where to invest in marketing.

The browser-based GA4 tag starts with Google Consent Mode v2 set to “denied”. In the EEA, UK, Switzerland, certain associated territories, or an unknown region, it remains denied until you click Accept. In another region with no stored choice and no GPC signal, the site updates analytics consent to granted under its regional default. A stored Accept grants GA4, while a stored Decline keeps it denied. When denied, the tag sets no tracking cookies on your browser and sends only aggregated, cookieless pings (which Google uses for modeled, non-identifying counts). When granted, GA4 sets the standard cookies (_ga, _ga_<property-id>) and we receive the browser-based events listed below tied to a randomly assigned client ID.

• Page views (URL, title, locale)
• Anonymized referrer + UTM tags
• Approximate location (country / region, derived from IP)
• Browser, OS, device type
• Outbound link clicks (notably to course.learn3d.ai on Teachable for course enrollment, and to our social profiles)
• Custom interaction events (e.g. pricing CTA clicks)

IP anonymization is enabled in GA4 by default (last octet truncated before storage). Legal basis under GDPR: Art. 6(1)(a), your consent via the cookie banner. You can withdraw consent at any time by clicking Cookie settingsin the site footer (this re-opens the banner so you can flip your choice) or by clearing your browser's site data for learn3d.ai.

Server-side analytics for short links:

When you open a link in the learn3d.ai/3d-ai/... format, the redirect can trigger a server-side campaign_details event. The relay uses the explicit choice available in the first-party l3d_consent_v1 cookie and the regional default described above. The site mirrors the browser local-storage choice into this cookie whenever a page loads. A cookie value of granted permits the relay, and denied blocks it. If this cookie is absent, the relay is blocked for the EEA, UK, Switzerland, certain associated territories, and unknown regions. It is permitted for other regions unless the request includes a GPC signal. An explicit granted choice permits the relay even when GPC is present. The analytics relay itself does not set an analytics identifier cookie. Its payload always sets non_personalized_ads to true and both ad_user_data and ad_personalization to DENIED.

The relay receives these transient inputs: the short-link code, timestamp, referrer, browser user agent, and IP address. The IP address is reduced to the first three octets for IPv4 or the first three groups for IPv6. The reduced IP address and browser user agent are hashed with a secret value and the current UTC date to create an eight-character pseudonymous identifier that changes each UTC day. GA4 receives a client ID built from that daily identifier and the start of the same UTC day, the short link's source, medium, campaign, and content tags, and the technical event fields engagement_time_msec=1 and source_layer=edge. Google does not receive the visitor's raw IP address, raw browser user agent, or referrer in this event.

Advertising tags (Google Ads remarketing):

We use the Google Ads tag (operated by Google LLC) to measure attribution for any paid acquisition campaigns we run and to build remarketing audiences from users who have engaged with the site. Like browser-based GA4, the Ads tag uses Google Consent Mode v2 and follows the stored choice, regional default, and GPC rules described above. When advertising consent is denied, no advertising cookies are dropped and Google receives only aggregated, cookieless signals. When advertising consent is granted, the tag may set advertising cookies and send the attribution and remarketing data described here.

Legal basis under GDPR: Art. 6(1)(a), your consent. Note that consent for advertising/remarketing is a separate legal basis from consent for analytics; both are bundled under a single Accept on our banner for usability, but you can withdraw consent at any time via the Cookie settings link in the site footer.

Advertising tags (Meta Pixel):

We use the Meta Pixel (operated by Meta Platforms, Inc., covering Facebook and Instagram) to measure attribution for any paid campaigns we run on those platforms and to build remarketing audiences from users who have engaged with the site. The pixel starts with Meta's Consent API set to “revoke” and follows the stored choice, regional default, and GPC rules described above. While consent is revoked, the pixel sets no tracking cookies (_fbp, _fbc) and does not send event data to Meta. When consent is granted, it starts sending standard page-view events tied to a randomly assigned browser identifier.

• Page views (URL, referrer, locale)
• Approximate location (country / region, derived from IP)
• Browser, OS, device type
• A hashed, non-reversible value derived from technical browser signals used by Meta for its own event-matching (no plaintext personal data is sent by us)

We do not run the Meta Pixel's <noscript> fallback image tag, since it has no way to check the stored choice or regional default before firing. Omitting it keeps Meta under the same consent rules as the site's other browser trackers. Legal basis under GDPR: Art. 6(1)(a), your consent. You can withdraw consent at any time via the Cookie settingslink in the site footer or by clearing your browser's site data for learn3d.ai.

Personalized advertising (Google Customer Match):

If you have given us your email address through a separate form (for example, by subscribing to a newsletter on our partner site Top3D.ai), we may share that email address with Google LLC in hashed form (irreversible SHA-256) for the purpose of personalized advertising on Google properties (Search, YouTube, Gmail, Discover) and for building similar audiences. This is the Google Ads “Customer Match” feature. We never share your email in plain text, and Google only uses the hash to look for a matching Google Account; if no match exists, the hash is discarded.

This processing involves the transfer of the hashed email to Google's servers in the United States. Legal basis under GDPR: Art. 6(1)(a), your explicit consent given when you submitted the email through the originating form. Under PIPA Art. 22 (Korea), the same consent-based legal basis applies, with cross-border transfer to Google LLC (United States) covered by Article 28.

You can withdraw consent for personalized advertising at any time by emailing hello@learn3d.aiwith the subject line “Customer Match opt-out”. We will remove your email from any Customer Match audience within 7 days. Note that if no match was ever found, there is nothing to remove on Google's side.

Web fonts (Google Fonts via Next.js self-hosting):

We use Noto Sans typefaces from Google Fonts for Korean, Japanese, and Simplified Chinese locales so non-Latin glyphs render natively. These fonts are downloaded at build time and self-hosted on our own domain via next/font/google. Your browser fetches fonts from learn3d.ai, NOT fromfonts.googleapis.com, so your IP address is never sent to Google for font delivery. This addresses the concern raised by the German Munich court (LG München, 20.01.2022, Az. 3 O 17493/20) about IP leakage to Google Fonts.

Email correspondence:

If you contact us at hello@learn3d.ai, we receive your email address and the content of your message. We process this to respond to your inquiry. Legal basis: GDPR Art. 6(1)(b) (steps prior to entering a contract) or 6(1)(f) (legitimate interest in responding to inquiries).

Cookies and local storage we set on learn3d.ai:

• learn3d_consent_v1: a browser local-storage entry (not technically a cookie) that remembers your explicit cookie-banner choice (granted or denied) so we do not ask again on every visit. No personal data, no third-party access.
• l3d_consent_v1: a first-party, server-readable cookie containing granted or denied. Accept and Decline write the same value here and in local storage. Opening Cookie settings clears the local-storage choice and immediately writes denied to this cookie while the banner is open. This lets our server apply the cookie-visible choice before a /3d-ai/... redirect. It uses Path=/ and SameSite=Lax and expires after 365 days.
• l3d_region: a first-party cookie set by our server to gated or openbased on the request country. The consent banner reads it to decide whether an explicit choice is required or the site's regional default applies. It expires after about 180 days.
• l3d_currency_geo: a first-party cookie set to GBP when the request country is the UK and removed for other regions. It provides a geographic currency hint for the course landing pages; a manual currency choice takes precedence. It uses Path=/ and SameSite=Lax and expires after about 180 days.
• learn3d_env_pricing_currency: a browser local-storage entry used on the course landing pages to remember a manual USD, EUR, or GBPprice selection. It remains until you replace it or clear the site's browser data and takes precedence over l3d_currency_geo.
• learn3d_first_touch: a browser session-storage entry that keeps the first utm_source, utm_medium, utm_campaign, utm_content, and utm_term values found in the current tab, together with a capture timestamp. learn3d_first_touch_replayed is a one-time marker showing that the browser queued this stored attribution for GA4 after analytics consent became active. Both are cleared when the tab session ends.
• l3d_promo_modal_v1: a browser session-storage entry containing a shown marker for the paid/referral traffic promo. It prevents the same promo from appearing more than once in a tab session and is cleared when that tab session ends.
• _ga, _ga_<property-id>: cookies set by Google Analytics when analytics consent is granted, either by an explicit Accept or the open-region default described above. Used to distinguish users and sessions for analytics. They expire after 2 years of inactivity.
• _gcl_*, _gac_*: cookies set by Google Ads when advertising consent is granted, either by an explicit Acceptor the open-region default described above. Used for conversion attribution and remarketing audiences (see “Advertising tags” section above). They expire after 90 days.
• _fbp, _fbc: cookies set by the Meta Pixel when Meta consent is granted, either by an explicit Accept or the open-region default described above. Used for conversion attribution and remarketing audiences on Facebook/Instagram. They expire after 90 days.

If you proceed to course.learn3d.ai (Teachable) to view or purchase a course, cookies may be set by Teachable per their policy.

3. What data we do NOT collect on learn3d.ai

• We do not run a TikTok Pixel or any other advertising-network tracker beyond the Google Ads tag and Meta Pixel disclosed above. When Google Ads consent is denied, it does not set advertising cookies and may send the limited cookieless signals described above. When Meta consent is revoked, the Meta Pixel sets no tracking cookies and sends no event data.
• We do not sell or rent your data to third parties for their own independent use.
• We do not require you to create an account to view the school home page or course preview.

4. Third-party processors

We use the following processors who may process limited data on our behalf:

All processors are bound by appropriate data-processing agreements (where required by GDPR).

5. Data retention

• Cookieless analytics (Vercel): retained by Vercel for up to 12 months, then aggregated.
• Google Analytics 4: user-and-event data retention is set to 14 months (the GA4 maximum non-extended option), after which records are aggregated. This covers browser-based events from sessions where analytics consent is granted and permitted server-side short-link campaign_details events. Browser client IDs, daily pseudonymous short-link client IDs, campaign tags, and event metadata are deleted at the end of that window.
• Meta Pixel (sessions where Meta consent is granted): Meta retains event data per its own data policy; the _fbp/_fbc cookies we set expire after 90 days.
• Email correspondence: retained as long as needed to respond to your inquiry, plus up to 2 years for record-keeping.
• Course-related data on course.learn3d.ai: governed by Teachable's retention policy.

6. Your rights under GDPR (and equivalents)

If you are in the EU/EEA, UK, Korea, or California, you have the following rights regarding the personal data we hold about you:

• Right of access: you can request a copy of any data we hold.
• Right to rectification: you can request correction of inaccurate data.
• Right to erasure(“right to be forgotten”): you can request deletion.
• Right to data portability: you can request your data in a machine-readable format.
• Right to object: you can object to processing based on legitimate interest.
• Right to withdraw consent: where processing is consent-based.
• Right to lodge a complaint: with your local data protection authority (e.g. the German BfDI, the Korean PIPC, the UK ICO).

To exercise any of these rights, email us at hello@learn3d.ai. We will respond within 30 days.

7. International data transfers

Some of our processors (including Vercel, Teachable, Google, and Meta) are located in the United States. Data transfers to these processors are covered by Standard Contractual Clauses (SCCs) and applicable adequacy decisions (e.g. EU-US Data Privacy Framework where applicable).

8. Children's privacy

We do not knowingly target or collect data from children under 16. If you believe we hold data about a child, please contact us at hello@learn3d.ai and we will delete it.

9. Changes to this policy

We may update this privacy policy as the school evolves (for example, if we add an email signup form). For material changes, we will surface a notice on the website.

10. Contact

For any privacy-related questions, requests, or concerns:

Email: hello@learn3d.ai
Postal: 3D SNM Co., Ltd., Floor 4, 6, Heukgyo-ro 109beon-gil, Seo-gu, Busan 49223, South Korea
Corporate website: snm3dcorp.com