Theme
storey.theme
Whether you chose light, dark, or system. Read before the first paint so a page never flashes the wrong theme at you.
Written: When you use the light / system / dark control in the header.
Basement
Most mortgage privacy policies describe a data supply chain: cookies, analytics, advertising identifiers, partner sharing, a retention schedule. This site has none of that, so this page does not pretend to. It describes four preferences kept in your own browser, and then it stops.
Revised 2026
The short version
Those four values live in your browser’s localStorage, under the origin of this site. They are read by this site’s own scripts and by nothing else. They are never put in a request, never sent to a server, and never seen by anyone but you.
storey.theme
Whether you chose light, dark, or system. Read before the first paint so a page never flashes the wrong theme at you.
Written: When you use the light / system / dark control in the header.
storey.scheme
Which of the four colour schemes you picked in the palette tab at the bottom left.
Written: When you choose a scheme, or open a link that carries one in its address.
storey.a11y
Text size, high contrast, underlined links, and reduce-motion — the four switches in the accessibility knob at the bottom right, as one small JSON object.
Written: When you change one of those switches. Until then nothing is written and the motion setting follows your operating system.
storey.storage-choice
Whether you have already answered the storage notice, so it does not ask you twice.
Written: When you accept or decline the notice. Declining also erases the three keys above.
You can remove all four at any time: decline the storage notice, or clear site data for this domain in your browser. Nothing breaks — the site falls back to your operating system’s theme and motion preferences, which is what it uses before you have chosen anything.
Forms
There is a quote form, a contact form, an application form and an agent-referral form on this site. Each one checks what you typed, tells you what is missing, and then shows you the confirmation state a real form would show. That is the whole of it.
The submit handler has no network call in it. There is no endpoint configured, no third-party form service, no email relay and no database. Whatever you type stays in the page’s memory until you navigate away or close the tab, at which point it is gone — it is not written to storage either.
This matters most for the fields a mortgage form would normally ask for. Do not type a Social Security number, a date of birth, an account number or anything else you would not want to lose track of into a demonstration form — not because this one would misuse it, but because no form on any website deserves that until you know where it is going, and here it is going nowhere at all.
The network
Requests for this site’s own files: the HTML, one stylesheet, a few small scripts, the self-hosted fonts and the SVG images. Nothing is fetched from a content delivery network, an ad network, a font service or an analytics host, so no other company sees a request from you on account of this page.
Any web server, serving any website, sees the requests made to it — the address asked for, the time, the browser’s user-agent string, and the IP address the request came from. That is a property of how the web works and of whoever hosts the files, not something this site arranges, reads or uses. There is no code here that logs, profiles or fingerprints anything.
Calculator inputs are put in the address bar so that the link you copy is the answer you saw. That is a deliberate feature and it has a consequence worth naming: if you share a calculator link, you share the numbers in it. They are figures you typed into an illustration rather than anything the site knows about you, but they travel with the link, so read the address before you paste it somewhere public.
The four social links in the footer point at the front pages of Facebook, Instagram, LinkedIn and YouTube. Following one takes you to that company, under that company’s policies. Nothing is embedded from them here, so simply loading this page tells them nothing.
What is missing
A privacy policy that describes machinery a site does not have is a lie in the other direction: it makes the site sound careful about a risk it never created. These are the standard paragraphs, and why each one is not here.
The site sets no cookies at all — not one, not a “strictly necessary” one. There are therefore no cookie categories to consent to, and a consent manager here would be theatre performed over nothing.
There is no Google Analytics, no tag manager, no Meta pixel, no session recorder and no heat map. No third-party script of any kind is loaded, so no third party learns you were here.
That sentence appears on most lender privacy policies because most lenders really do share. This site collects nothing to share, so the sentence would be false in the flattering direction.
The Gramm-Leach-Bliley model notice describes what a financial institution does with the non-public personal information of its customers. This demonstration has no customers, takes no applications and holds no such information, so printing the notice would imply machinery that does not exist.
Transport encryption protects data in transit. Nothing is in transit: no form here posts anywhere. Quoting a cipher strength as though it were a safeguard for information the site never receives is a boast, not a disclosure.
Both would be answers to a question the site never raises, because there is nothing held about you to keep or to delete. What is stored is on your device, and clearing your browser storage removes it.
Asking about it
The claim this page makes is checkable, and checking it is welcome. Open your browser’s developer tools, look at the network panel and the application panel, and see whether a cookie is set, a third-party host is contacted or a fifth storage key appears. If you find one, this page is wrong and should be corrected rather than defended.
Write to [email protected]. That address ends in.example, a reserved suffix that can never belong to anyone, because Storey Home Lending is a fictional company and a working inbox here would be a fabrication of its own. On a live deployment this is the line that would carry a real privacy contact.
If you would rather read the rest of the small print: terms and conditions, accessibility statement, and licensing and disclosures.
Colour scheme
Each scheme is drawn twice — once for the light theme and once for the dark — and contrast-checked in both before it is offered here.
Built against WCAG 2.2 AA as a target. It has not been independently audited, so no conformance is claimed. If something here blocks you, that is a bug.