Privacy Policy

What we collect, why, who else handles it, and how to ask us about it.

Last updated October 16, 2026

Who we are

SignalPage is made and run by HowToBreakIt Digital, a sole proprietorship owned by Steven Boutilier and based in Halifax, Nova Scotia, Canada. Steven is responsible for how SignalPage handles personal information. Contact him at steve@howtobreakit.ca.

Two kinds of information

This policy covers two different situations:

  • Information about you, as a SignalPage customer or a visitor to signalpagecms.com. We decide how this is used, and this policy explains how.
  • Information about your site's visitors, such as what they send through your forms. You decide what your site collects and what happens to it. We store and process it only to run your site for you.

Information about you

  • Your account. Your email address, your site's address, your plan, and your portal password, which we store only in a scrambled (hashed) form that can't be read back.
  • Billing. Payments are handled by Stripe. We never see or store your full card number. We keep the Stripe references that link your subscription to your site, and whether it's active.
  • Support. The messages and files you send us. Files attached to a support request are deleted 90 days after the request is closed.
  • Emails we send you. We record whether account emails, such as password resets and support replies, were sent.
  • Cookies. Signing in sets cookies that keep you signed in, including a longer-lasting one if you choose "Remember me". These are needed for the service to work.
  • Visiting signalpagecms.com. Our marketing site uses Google Tag Manager to load Google Analytics, which uses cookies to tell us how people find and use the site. It also counts visits with SignalPage's own cookieless visitor stats.

How we use it

We use this information to run your site and account, take payment, answer support requests, send emails about your account and the service, keep SignalPage secure, and meet our legal obligations, such as keeping tax records. We don't sell personal information, and we don't put advertising on your site. We'll only send you marketing emails if you've agreed to receive them, and every one includes a way to stop.

Your site's visitors

Each SignalPage site has its own database. Form submissions and other information visitors send are stored there for the site's owner. We access it only to run, back up, and support the site, or when the law requires it.

SignalPage's built-in visitor stats work without cookies. They store no IP addresses or anything else that identifies a visitor, only daily totals, which are kept for 400 days. Site owners can also add their own tools, such as Google Analytics. Those are the site owner's choice and are covered by the site owner's own privacy policy.

If you visited a site built on SignalPage and have a question about your information, contact the owner of that site. We'll help them answer it.

Anonymous usage data

Unless its owner turns it off, each site sends us a short daily summary of how it's built, such as how many pages and forms it has and which kinds of blocks it uses, along with daily visit totals. It contains no content and no information about visitors. Site owners can turn it off under Settings, Privacy.

Who else handles information

We use a small number of service providers to run SignalPage:

  • Hetzner hosts the servers that run every site and our own systems.
  • Stripe processes payments.
  • Resend delivers the emails your site sends, such as form notifications, unless you connect your own email account.
  • Cloudflare provides DNS for our domains, and runs Turnstile spam protection on sites whose owners turn it on.
  • Google sends our account and support emails through Gmail, provides Google Analytics on signalpagecms.com, and runs reCAPTCHA spam protection on sites whose owners turn it on.

Some of these providers store or process information outside Canada, including in Europe and the United States, where it's subject to local laws.

How long we keep it

  • Account information is kept while your account exists. If you ask us to delete your account, we delete it and your site within 30 days. Copies in backups are gone within a further 14 days.
  • Billing records are kept for as long as Canadian tax law requires, currently six years.
  • Support attachments are deleted 90 days after the request closes.
  • Visitor stats are kept for 400 days.

Keeping it safe

Every site is served over HTTPS and runs in its own process with its own database. Passwords are stored hashed. Staff access to a customer's site is logged, and the customer is emailed when it starts and ends.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, withdraw your consent to how we use it, or ask us to delete it. Email steve@howtobreakit.ca and we'll respond within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Changes to this policy

If we make a significant change, we'll email account holders before it takes effect. The date at the top of this page shows when it last changed.