Data and security
Balboa Bunkers is a fictional firm and this site is a reference build. This page says exactly what the site does with what you do on it.
What it stores
The site sets no cookies of its own. The sample portal keeps your chosen profile and the state of the sample documents in the browser's session storage. It is cleared when you close the tab, and a sample session ends after thirty minutes without activity.
What it sends
Nothing. The request form and the portal run entirely in your browser. There is no mailbox, no database and no analytics behind them, and no document you type or paste leaves your device.
What it loads
Everything comes from this domain except the typefaces, which come from Google Fonts. Google therefore sees the address of the device that asks for them. No script from any other party runs on the site.
How pages are served
Every page carries a content security policy that allows only this domain and the typefaces, forbids framing, and blocks all outgoing connections from scripts and forms. It is also served with strict transport security, a referrer policy and a permissions policy that switches off location, camera, microphone and payment. You can read the headers in your browser's network panel.
This domain does not send or receive email, and its DNS says so: a null mail exchanger, a sender policy that permits nobody and a strict reject policy for forged messages.