Privacy Policy
We take your privacy seriously. This policy explains exactly what data we collect, why we collect it, and how it is protected. We do not sell your data. We do not run ads. Our only product is the intelligence inside each issue. Last updated: May 18, 2026.
Operator Signal ("we," "us," or "our") is an independent newsletter publication delivering product intelligence for e-commerce operators. We publish content for subscribers on a free and paid basis through our platform powered by Ghost.
This Privacy Policy explains how we collect, use, and protect your personal information when you subscribe to or interact with Operator Signal. By subscribing or visiting our site, you agree to the practices described here.
We collect three categories of data, summarized below.
- Email address — required to create a subscription and deliver newsletters
- Name — optional, used to personalize communications
- Billing information — for paid subscribers; we never store raw card data (see Section 05)
- Messages & replies — any feedback or inquiries you send us directly
- Email engagement data — open rates, link clicks, and delivery status
- Device & browser data — browser type, OS, and IP address when visiting our site
- Usage data — pages viewed, time spent, and referral source
- Cookies & tracking technologies — see Section 06 for full details
- Our payment processor (Stripe) may share subscription status and billing event data with us
- If you connect a social account to sign up, we may receive your name and email from that provider
We use the information we collect to:
We will not sell your personal information to third parties. We will not use it to serve you third-party advertising. Our only revenue source is your subscription.
We share your information only in the following limited circumstances:
- Service providers — trusted vendors who help us operate (Ghost platform, Stripe, transactional email services). They are contractually bound to protect your data and may only use it to provide services to us.
- Legal compliance — we may disclose information when required by law, court order, or governmental authority.
- Business transfers — in the event of a merger or acquisition, your data may transfer as part of that transaction. We will notify you before your data is subject to a different privacy policy.
- Aggregated data — anonymised, non-identifiable statistics (e.g., subscriber growth) may be shared publicly or with partners.
Paid-tier subscriptions are processed exclusively through Stripe. When you subscribe to a paid tier:
- All card data is entered directly on Stripe's secure servers. We never see or store your full card number, CVV, or expiry date.
- Stripe processes your payment in accordance with their own Privacy Policy and PCI DSS standards.
- We receive limited billing data from Stripe: your plan, billing cycle, last-four digits (for display), and payment status.
Our website and emails use cookies and tracking technologies to improve your experience and understand content performance.
- Essential cookies — required for authentication, site security, and account functionality. These cannot be disabled.
- Analytics cookies — aggregate usage data to understand what content resonates. We use privacy-respecting analytics and anonymise data where possible.
- Email tracking pixels — small images embedded in newsletters that register when an email is opened. Disable image loading in your email client to opt out.
You can control cookies through your browser settings. Disabling cookies may affect certain site functionality.
We retain data for as long as necessary to provide the Service, then delete or anonymise it.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active subscriber account | Duration of subscription | Service delivery |
| Unsubscribed email | Indefinite (suppression list) | To honor opt-out and prevent re-enrollment |
| Billing records | Up to 7 years | Tax and accounting compliance |
| Email engagement logs | Up to 24 months | Performance analysis; then aggregated or deleted |
You may request deletion of your personal data at any time — see Section 08.
Depending on your location, you may have the following rights regarding your personal data. To exercise any of them, contact us at the address in Section 11.
We will respond to all data rights requests within 30 days. We may need to verify your identity before fulfilling a request. EU/EEA residents may also lodge a complaint with their local data protection authority.
Operator Signal is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a minor has provided us with data without appropriate consent, please contact us immediately and we will delete it promptly.
We may update this Privacy Policy to reflect changes in our practices or applicable law. When we make material changes, we will update the "Effective" date at the top of this page and notify active subscribers via email.
Your continued subscription after any changes constitutes acceptance of the updated policy.
Questions about this Privacy Policy, or want to exercise your data rights? Reach out directly.
Email: privacy@operatorsignal.com
For subscription and general questions: hello@operatorsignal.com