Privacy notice

Ledger & Co is a fictional brokerage and this site is a design and engineering demonstration. It is published without analytics, without advertising pixels, without third-party scripts of any kind, and without a server that receives form submissions. This notice describes what a real deployment of a site like this one would and would not do, and it describes accurately what this demonstration actually does, which is almost nothing.

If you are reading this looking for the privacy notice of a company you are actually doing business with, you are in the wrong place. Nothing here is that company.

Nothing is transmitted from your browser to us. The contact form on this site is not wired to a server; submitting it runs a small amount of validation in the page and shows a confirmation message. No field value leaves your device, and nothing is stored anywhere we can read.

One value is written to your browser's local storage: whether you last selected the Individuals or the Agents view in the masthead. It exists so the page does not reset your choice on every navigation. It never leaves your browser, it is not an identifier, and clearing site data removes it.

There are no cookies, no tracking pixels, no session identifiers, no fingerprinting, no analytics of any kind, and no third-party requests. Fonts, images, styles and scripts are all served from this origin.

A licensed brokerage assisting with Marketplace enrolment necessarily handles sensitive information: names, dates of birth, Social Security numbers, household income, immigration status, and in the course of a plan comparison, the names of your physicians and your prescriptions. That is protected health information and personally identifiable information, and it is governed by HIPAA, by the Gramm-Leach-Bliley Act, by CMS Marketplace agreements, and by state insurance regulation.

A real deployment would set out precisely which of those it collects, why each is necessary, how long it is kept, who inside the firm can see it, which carriers and which government systems it is disclosed to, and how to request access, correction or deletion. It would also state that consent to access a Marketplace application is recorded, timestamped and auditable, because CMS requires exactly that.

It would also state, plainly, that information given on a Marketplace application is not used for immigration enforcement.

Your information is not sold. It is not shared with lead brokers, marketing networks, data aggregators or advertising platforms. A brokerage that sells enquiry data is not a brokerage, it is a lead vendor with a licence, and the two should not be confused.

Broker compensation is paid by the carrier and filed inside the rate. There is therefore no commercial reason to monetise an enquiry any other way, which is the structural point: incentives, not promises, are what keep a privacy policy honest.

This site is not directed at children and does not knowingly collect information from them. A real brokerage would handle information about children only as part of a household application submitted by an adult, and would apply the same protections to it as to any other household member's information.

This is a demonstration document and may change without notice, because it is illustrative rather than binding. A real notice would carry an effective date, a version history, and a commitment to notify enrolled households of material changes.

Questions about this demonstration can be sent to [email protected], an address that does not exist.