Records & Privacy

What this Bureau keeps, what it never sees, and what happens to your answers. Revised September 28, 2026. Effective immediately.

The short version. The free survey runs entirely inside your browser — those answers are never transmitted. If you purchase the Classification Annex, your answers (as a set of choices), a random file number, and your order ID reach our server for exactly two purposes: verifying payment and issuing your file. We do not ask for your name, email, or account anywhere in the product. There are no ads and no analytics.

I.Who operates this site

The Developer Classification Survey (Form DEV-24A) is operated at shadowlab.cyou ("the site", "the Bureau"). Questions about this statement go to support@shadowlab.cyou.

II.The free survey — nothing leaves your browser

Part I of the survey is computed locally. Your selections are held in your browser's localStorage under the key dcs_state_v1 so you can close the tab and resume. This data is never transmitted to us or anyone else, and it disappears when you clear site data in your browser.

III.The paid annex — what is transmitted and stored

When you purchase the Classification Annex, the following reaches our API (api.shadowlab.cyou, hosted on Cloudflare Workers) and is stored in Cloudflare's key-value storage:

Your 30 answer choices — stored as item indexes and option letters (e.g. item 4, choice A). Not free text. This is the raw material your dossier is computed from, and the fingerprint that lets you retrieve it later.
A random six-digit file number — generated by the site, not derived from anything about you.
Your order ID — the identifier on your payment receipt, used to bind the payment to the file.
The generated report — cached so your file opens instantly on return visits.

We do not collect names, email addresses, postal addresses, phone numbers, or payment card data. There are no user accounts. If you never tell us who you are — and nothing in the product requires it — the file is anonymous by construction.

IV.Third parties, and exactly what each one receives

Party	Role	What they receive
Waffo Pancake pancake.waffo.ai	Merchant of record. Processes the payment, collects tax, issues your receipt.	Your payment details (handled entirely on their side — card data never touches our servers) and the file number attached to the checkout. We receive only an order ID and payment confirmation.
DeepSeek api.deepseek.com	Wording. The computed report is rewritten in the Bureau's voice by a language model.	The computed report text and derived score facts. Your order ID and file number are not part of that request, and no identifying information is included — because we do not have any.
Cloudflare pages.dev / workers.dev	Hosting, CDN, and API infrastructure.	Standard request metadata processed to serve the site and stop abuse — including short-lived rate-limiting counters (which incorporate your IP address and expire automatically within about a minute). These counters are not used to profile you.

No one else. The site runs no analytics, no advertising, no tracking pixels, no cookies, and embeds no social widgets.

V.What is stored on your device

dcs_state_v1 — your in-progress survey answers, so a refresh doesn't lose your work.
dcs_annex_<file number> — your cached dossier, so it opens instantly.
dcs_order_<file number> — your order ID, so you don't have to re-type it after closing the tab.

All three live in your browser's localStorage, never leave it except as described in §III, and can be wiped at any time with your browser's "clear site data".

VI.Retention and deletion

Payment bindings and report caches are kept so your file survives across visits. If you ask us to delete a file — or a payment is reversed — we delete the report, the stored answers, and the payment binding, and the file number goes dead. To request deletion, email support@shadowlab.cyou with your file number and order ID. Because we hold no name or email, your file number is the only key to your data: keep it if you want retrieval, share it if you want deletion.

VII.Children

The site is a workplace-flavoured instrument for working developers and is not directed at children. We do not knowingly accept purchases from anyone under 16.

VIII.Changes to this statement

Changes are posted on this page with a new revision date. Material changes (a new third party, a new category of data) will be summarized at the top of the page.