Privacy
Fun legal stuff
Privacy Policy
Last updated: 18 June 2026
This Privacy Policy explains how The Internet Community Company OÜ ("TICC", "we", "us", "our") collects, uses, and protects personal data when you visit and interact with our Web3 Advertising learning hub at web3-advertising.com (the "Hub").
This policy covers the Hub — our educational blog and newsletter — and the legacy W3A course platform described in Section 12. It does not cover the Specify advertising platform itself, which is governed by its own Terms of Service — including its data and privacy terms — at docs.specify.sh/legal/terms-of-service.
1. Who we are (Data Controller)
The data controller responsible for your personal data is:
The Internet Community Company OÜ Registry code: 16871286 Registered address: Tornimäe tn 3 // 5 // 7, Kesklinna linnaosa, 10145 Tallinn, Estonia Email: privacy@internetcommunity.co
We are registered in Estonia and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law.
2. What data we collect
Depending on how you use the Hub, we may collect:
| Category | Examples | When |
|---|---|---|
| Newsletter & member data | Email address; name (if you provide it); subscription preferences | When you subscribe to the newsletter or create a member account |
| Comment data | Your name/display name and the content of comments you post | When you comment on a post (commenting requires a member account) |
| Email engagement data | Whether you opened an email and which links you clicked | When we send you newsletters |
| Usage & technical data | IP address, browser type, device type, pages visited, referring page, approximate location (country/city level) | Automatically, through our built-in analytics |
Course platform data is described separately in Section 12.
We do not knowingly collect special categories of data (e.g. health, political, biometric) through the Hub, and we ask that you don't share such data in comments or messages.
3. How we collect it
- Directly from you — when you subscribe, create an account, comment, or contact us.
- Automatically — through our built-in, privacy-friendly analytics (see Sections 7 and 8).
4. Why we use your data, and our legal basis
Under the GDPR we must have a lawful basis for each use of your data:
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Sending you the newsletter and educational content you signed up for | Consent — which you can withdraw at any time |
| Managing your member account, preferences, and comments | Performance of a contract |
| Measuring engagement and improving the Hub's content | Legitimate interests — running and improving our site |
| Keeping the Hub secure and preventing abuse | Legitimate interests — security and fraud prevention |
| Complying with legal obligations | Legal obligation |
Where we rely on legitimate interests, we balance those interests against your rights and only proceed where yours don't override ours. You can object to this processing (see Section 11).
5. Marketing communications
We only send you marketing emails (our newsletter and related educational content) where you've subscribed. Every email includes a one-click unsubscribe link, and you can opt out at any time without affecting your access to the Hub's public content.
6. Who we share data with
We don't sell your personal data. We share it only with service providers ("processors") who help us run the Hub and the course platform, and only as needed to provide the service. These currently include:
| Provider | Role | Location / transfer note |
|---|---|---|
| Ghost Foundation (Ghost(Pro) managed hosting) | Hosts the Hub; stores newsletter, member and comment data; delivers newsletter emails and provides our built-in analytics, using its own sub-processors | EU and other data centres, under appropriate safeguards (see Ghost's DPA) |
| Vercel Inc. | Hosts the legacy W3A course platform (see Section 12) | US-based provider, with SCCs in place |
| Neon Inc. | Provides the course platform's database | Data stored in AWS Frankfurt (eu-central-1), within the EU; provider is US-based, with SCCs in place |
We may also disclose data where required by law, to enforce our terms, or to protect our rights, users, or the public.
7. Cookies and similar technologies
We keep cookie use to a minimum:
- Essential cookies — set when you log in as a member (for example, to comment) or sign in to the course platform. These keep you signed in and are required for the service to work, so they don't require consent.
- Analytics — we use Ghost's built-in, first-party analytics, which is privacy-friendly and does not set tracking cookies or follow you across other websites. Because of this, the Hub does not require a cookie consent banner for analytics.
If we ever add tools that set non-essential cookies, we'll update this policy and ask for your consent first. You can also control or delete cookies through your browser settings.
8. International data transfers
Some of our providers are based outside the European Economic Area (EEA). Where personal data is processed outside the EEA, we rely on appropriate safeguards — typically the European Commission's Standard Contractual Clauses (SCCs) or an applicable adequacy decision — to ensure your data receives equivalent protection.
- Ghost Foundation stores EU member and newsletter data in EU and other data centres under such safeguards, as set out in its Data Processing Agreement. Newsletter email delivery is handled by Ghost on our behalf under the same agreement.
- The course platform database is hosted within the EU (AWS Frankfurt, eu-central-1). Its providers, Vercel and Neon, are US-based companies, and we rely on SCCs for any processing that takes place outside the EEA.
You can request more detail at privacy@internetcommunity.co.
9. How long we keep your data
- Newsletter / member data — for as long as you remain subscribed or hold an account, and a reasonable period afterwards. We delete it promptly after you unsubscribe or close your account, except where limited records must be retained to meet legal obligations.
- Comment data — for as long as the comment remains published, or until you ask us to remove it.
- Usage & analytics data — our built-in analytics is aggregate and privacy-friendly; we retain it only as long as needed to understand site performance.
- Course platform data — see Section 12.
10. How we protect your data
We use appropriate technical and organisational measures to keep your data secure, including encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable steps to reduce risk and to respond promptly to any incident.
11. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability — receive your data in a portable format
- Withdraw consent at any time (e.g. by unsubscribing), without affecting prior lawful processing
To exercise any of these rights, email privacy@internetcommunity.co. We'll respond within one month. There's normally no charge, and you don't need to give a reason.
If you believe we've handled your data improperly, you can lodge a complaint with our lead supervisory authority, the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or with the data protection authority in your own EU country.
12. The W3A course platform (legacy)
The Hub links to a separate, older course platform at course.web3-advertising.com, which we built and operate ourselves. This platform is being phased out, and its data will be migrated to the new Hub. While it remains available, the following applies:
What we collect there:
| Category | Examples |
|---|---|
| Account data | Name, email address, login credentials |
| Learning data | Course progress and completion, quiz responses and scores |
| Certificates | Your name and the certificate issued on completion |
Why and on what basis: We process this data to provide the courses you've enrolled in (performance of a contract) and, where applicable, with your consent.
Where it runs: The platform is hosted on Vercel, with a Neon PostgreSQL database located in the EU (AWS Frankfurt, eu-central-1). It sets essential session cookies to keep you logged in.
Retention and migration: We keep your course account, learning data, and certificates while your account is active. When this platform is retired, this data will be migrated to your account on the new Hub, and we'll notify you in advance. You can ask us to delete your course data at any time at privacy@internetcommunity.co.
13. Children
The Hub is intended for professionals and is not directed at children. We don't knowingly collect data from anyone under [16 — or the applicable age of digital consent]. If you believe a child has provided us data, contact us and we'll delete it.
14. Changes to this policy
We may update this policy from time to time. We'll post the revised version here with a new "Last updated" date, and for material changes we'll notify subscribers by email where appropriate.
15. Contact us
Questions about this policy or your data? Reach us at:
The Internet Community Company OÜ privacy@internetcommunity.co Tornimäe tn 3 // 5 // 7, Kesklinna linnaosa, 10145 Tallinn, Estonia