Privacy Policy

Summary

Shakescape is a dual-root browser for Android and iOS. It performs local HNS proof, DNSSEC, TLSA, and DANE checks and includes a device-local HNS and Bitcoin wallet. Shakescape has no advertising SDK, analytics SDK, developer-operated user account, browsing-history service, or paid feature unlock.

Browser and wallet data is stored locally. The app makes the network requests needed to load websites, resolve names, synchronize public blockchain data, and submit transactions or direct peer messages that the user explicitly authorizes.

Data stored locally

• Browsing history and navigation state, including page URLs, titles, visit times, and platform back-forward state.
• Cookies and other website storage managed by Android WebView or Apple WebKit.
• Downloads and the local records needed to present or complete them.
• Handshake headers, peer records, verified resources, resolver cache, DNS and security diagnostics, and manually configured relay endpoints.
• App settings, including cookie choices, homepage, network, optional requester-only P2P DNS relay, and optional recursive HNS DoH recovery URL.
• A network-scoped encrypted wallet database, public addresses and transactions, tracked names, swap state, durable synchronization checkpoints, and the key material needed to reopen the wallet.
• Camera frames and a decoded Handshake payment address while you use the native QR scanner. Shakescape processes them on the device and does not upload them.

Android stores the wallet database in app-private no-backup storage and wraps its database key with Android Keystore. iOS uses an app-private, backup-excluded database with complete file protection and a ThisDeviceOnly Keychain item requiring user presence. A newly generated recovery phrase is shown once for offline backup.

Network requests

Depending on the features you use, Shakescape may connect to:

• Websites and web services you choose to open.
• Handshake peers and DNS seed hosts for header synchronization, peer discovery, proofs, wallet activity, and approved transaction broadcast.
• Bitcoin peers used by the direct Bitcoin wallet for public chain synchronization and approved transaction broadcast.
• Authoritative DNS nameservers and proof-bootstrapped or RFC 9461-discovered authoritative DoH endpoints.
• Relay-capable Handshake peers only after you enable requester-only P2P DNS relay use.
• A recursive HNS DoH endpoint only after you enter and apply it as an optional recovery path.
• Cloudflare DNS-over-HTTPS at cloudflare-dns.com for ordinary internet DNS resolution and dual-root classification.
• Security or reputation services supplied by Android WebView, Apple WebKit, or the operating system.
• An exact P2P swap peer that you explicitly pair with or contact.

These endpoints may receive normal network information such as your IP address, requested hostname or URL, protocol metadata, request timing, and information you submit. Their operators control their own logging and retention. Denuo Web does not operate those third-party networks or services.

Wallet and sensitive data

Shakescape does not send the wallet database, recovery phrase, private keys, device-bound database key, or native approval tokens to Denuo Web, websites, analytics services, or a website wallet provider. The current app does not expose a website-to-wallet provider. Transaction and name information broadcast to public peers becomes visible according to the applicable public blockchain protocol.

Camera access is requested only after you tap the scanner in the native HNS send form. The current release does not expose the unfinished Bitcoin, name-operation, or Shakedex marketplace screens.

A directly paired swap peer can observe the IP address, port, timing, public offer terms, and protocol messages required for that session. Pairing transport is not blockchain authority or proof of settlement.

Cookies and website data

Websites may set cookies or use browser storage and are responsible for their own privacy practices. Android provides controls for third-party cookies and clearing cookies plus WebView origin storage. iOS provides a control that deletes WebKit cookies and website data.

Data sharing

Denuo Web does not sell personal or sensitive user data. Shakescape shares data only as necessary for functionality the user requests, such as loading a website, resolving a name, synchronizing public chain data, downloading a file, broadcasting an approved transaction, or communicating with an explicitly paired peer.

Retention and deletion

Local data remains until you clear it with an available app or platform control or uninstall the app. Android system settings can clear all app storage. Confirmed wallets can also be deleted through the protected in-app deletion flow. On iOS, uninstalling removes the app-container database, while the operating system may retain a ThisDeviceOnly Keychain item; a later installation reconciles and removes an orphaned item when no database exists.

Save the recovery phrase before deleting storage or uninstalling. Shakescape cannot display it again or recover a wallet for you. Files exported outside the app are controlled by their destination.

Children

Shakescape is not directed to children. As a general-purpose browser, it may display third-party websites outside Denuo Web's control.

Changes

This policy may be updated as Shakescape changes. Material changes should also be reflected in the in-app disclosure and applicable Google Play Data safety and Apple App Privacy declarations.