Privacy
No cookies, no analytics, no third party requests, and four preferences that never leave your device.
The short version
This site sets no cookies, runs no analytics, loads no third party scripts and has no server that receives anything you type. It stores four preferences in your own browser and nothing else.
It is a design demonstration for a fictional company, so there is no business here collecting anything about you.
What is stored, and where
Four values are written to localStorage in your browser, which means they stay on your device and are never transmitted:
- tl.theme - whether you chose light, dark, or follow the system.
- tl.pal - which of the four colour schemes you chose.
- tl.text, tl.contrast, tl.motion, tl.links - your accessibility choices.
- tl.storage - whether you have answered the storage notice, so it does not appear on every page.
If the design kit is open there is also tl.kit, holding the colours, fonts and names you set there. It exists so a demonstration survives a page navigation.
Choosing Store nothing in the storage notice removes all of them and stops any further writes for the rest of the session. That is enforced in code, not promised.
The contact form
The form on the contact page validates in your browser and then deliberately does nothing. There is no endpoint behind it. Nothing you type in it is transmitted, logged or stored anywhere, including in your browser.
The routing tool
Your three answers are written into the page URL so the result can be shared or bookmarked. They are not sent anywhere. There is no server to send them to.
External requests
This site loads no fonts, scripts, images, frames or stylesheets from any other domain. Everything is served from this one. That is a design decision and it is verifiable in your browser network panel.
Contact
Because this is a demonstration for a fictional business, there is no data controller, no processor and no privacy inbox that resolves to a person. If you are reviewing this template for real use, replace this page in full before it is deployed for an actual lender, which will have obligations under GLBA, state privacy law and its own regulator that this page does not address.