Privacy Policy

Information collected

When you subscribe, we collect your work email address and optional first name, last name, company, and role. We also retain Canadian consent evidence:

• Normalized email address
• Consent-text version
• Signup source
• Consent timestamp
• Confirmation timestamp
• Provider contact ID
• Provider subscription status
• Unsubscribe timestamp where applicable

We do not store raw IP addresses for newsletter signup. A short user-agent summary may be considered later only if justified and documented.

Sponsorship enquiries

If you submit the sponsorship form on the Advertise page, we collect your name, company, work email, what you are promoting, desired timing, and optional sponsorship type. We use this only to reply about sponsorship options and availability. The enquiry is sent by email to hello@patchsignal.ca. Submitting a sponsorship enquiry does not subscribe you to Patch Signal Daily.

Purpose of collection

We use this information to operate double opt-in for Patch Signal Daily, send confirmation and welcome messages, deliver the daily brief to confirmed subscribers, honour unsubscribe requests, and maintain consent evidence. We also measure how Daily emails and hosted reports are used so we can improve the briefing, understand which operators and sections readers use, and measure sponsorship performance if a labelled placement is sold.

Double opt-in

Submitting the form creates a pending subscription only. You must confirm via email before your address becomes active and eligible for daily broadcasts.

Service providers

Subscriber and consent records are stored in Supabase Postgres. Transactional and broadcast email delivery is handled by Resend. Public-site usage measurement uses Google Analytics 4 and Patch Signal’s own anonymous report analytics. Email-delivery events such as delivered, bounced, complained, and unsubscribed may update local subscription status through verified webhooks. When click tracking is enabled, Resend rewrites Daily links through a Patch Signal tracking host (for example links.patchsignal.ca) so we can count campaign clicks without storing who clicked. Open tracking, if enabled, uses a Resend-injected pixel and is an imperfect secondary metric because many mail clients prefetch images. We may also use automated signals such as known bot or email-security scanner user agents to keep commercial metrics from counting non-human traffic. We do not sell subscriber data and we do not build a person-level profile of which emails an identifiable reader opened.

Unsubscribe

Daily emails include a Resend-managed unsubscribe link. When you unsubscribe, we update provider status and local subscriber status so future broadcasts are prevented.

Retention

We retain subscription and consent records for as long as needed to operate the newsletter, honour suppression obligations, and respond to correction or deletion requests. Anonymous email-campaign and report-interaction events are kept for about 24 months so we can compare editions. Exact retention schedules require legal review.

Correction and deletion requests

Contact hello@patchsignal.ca to request correction or deletion of your subscriber information.

Cookies and analytics

The public website uses Google Analytics 4 to understand visits, pages viewed, and traffic sources. Google may set cookies or use similar identifiers. We do not use Google Analytics for advertising or remarketing, and we do not send names or email addresses to Google. Hosted Daily reports also set an anonymous first-party cookie named ps_rid so we can count unique readers rather than raw page views. That cookie is not linked to your subscriber record. We do not build a person-level log of which emails an identifiable reader opened. Essential hosting cookies may also be set by the deployment platform. Contact hello@patchsignal.ca with questions about this measurement.

Contact

Email hello@patchsignal.ca.