Shanhai山海

Legal

Privacy Policy

Last updated 11 August 2026 · applies to the Shanhai iOS app and this website

What you pour stays on this device. The text of your entries is stored locally and is never uploaded — not to us, not to anyone. The app sends anonymous counters (a screen was opened, a purchase happened) tagged with a random session id that is not linked to you, your device or your entries. No ads, no third-party trackers, no account. Deleting the app deletes everything with it.

That paragraph is also the privacy page inside the app. Everything below is the same set of facts, written out at length.

Who is behind this

Shanhai (山海) is made and published by one independent developer, Fuuqiu. There is no company, no analytics vendor and no third party with access to anything described here. Questions, deletion requests or complaints: Fuuqiu@gmail.com.

What stays on your device

All of the following is written to the app's own storage area on your iPhone and stays there:

  • The full text of every entry you pour, exactly as you wrote it.
  • The feeling words the app sensed, and any edits or additions you made to them.
  • Your emotional fingerprint and the derived parameters of your creature — species, colour, material, light pattern, stance — plus its history.
  • Your settings, language choice, and whether you have Pro.

None of it is uploaded, backed up to a server of ours, or transmitted anywhere. There is no account to attach it to and no server-side copy to request or leak. If you use iCloud device backup, Apple's normal encrypted backup of your phone may include the app's storage; that backup is between you and Apple and is not visible to us.

Analysis happens on the phone. The feeling words and the parameters that shape your creature are computed locally. Your entry text is never sent anywhere to be analysed.

Voice entries are transcribed on the device. When you pour by voice, speech recognition is forced into on-device mode — audio is not sent to Apple's servers for transcription. The audio itself is not kept once the words have been transcribed.

The one thing the app does send

The app sends anonymous product counters so the developer can tell whether the thing is being used at all. A single message contains five fields and nothing else:

  • the product id (shanhai);
  • an event name from a fixed, published list — app_open, pours, creature_views, paywall_views, purchase and a handful of others in the same vein;
  • a random 12-character session id that expires after 30 minutes of inactivity. It is generated on the device, is not derived from any device or account identifier, does not follow you across devices, and cannot be traced back to a person;
  • a flag marking the first event of a session;
  • a small number of low-cardinality labels from a fixed allow-list — for example whether an entry was typed or spoken, or which plan was purchased. Values must be short and free of whitespace and punctuation, which is enforced in code.

There is no field in that message capable of carrying your writing, and no free-text field of any kind. These counters go to cockpit.tokensqc.com, a first-party endpoint run by the same developer. They are not shared with anyone, not sold, and not used for advertising or personalisation.

As with any request over the internet, the receiving server sees the originating IP address at the moment of the request. It is not stored alongside the counters, not used to build a profile, and not linked to the session id.

Turning it off

Settings › Privacy › anonymous stats. Switch it off and the app stops sending, immediately and completely — this is enforced at the single network exit point in the code, not by a filter somewhere downstream. Everything else in the app keeps working; it works offline too.

No account, ever

There is no sign-up, no email address, no password, no social login and no profile. The app never asks who you are, and it has no way to find out.

Deleting your data

  • Let the void forget (Settings › Privacy) deletes every entry in a date range you choose. The entries are removed, not flagged as hidden, and your creature fades accordingly — which is also the proof that its shape genuinely came from your data.
  • Deleting the app removes all of it: entries, fingerprint, creature, settings. Nothing survives on a server, because nothing was ever put on one.

Because we hold no copy of your writing, there is nothing for us to delete on request and no export we could produce. Anonymous counters already sent cannot be linked back to you, and so cannot be individually retrieved or removed.

Purchases

Pro is sold through Apple's In-App Purchase system. Apple handles the payment; the developer never sees your card, billing address, Apple ID or name. The app receives only a signed indication from StoreKit that a subscription or lifetime purchase is currently active, and evaluates it on the device. Apple's own privacy policy governs the transaction itself.

Notifications

Notifications are optional, and only two exist: a reminder 24 hours before a free trial ends, and — off by default — one gentle nudge a week. Both are scheduled locally on the phone. There is no push server, so no notification token is ever sent anywhere.

Third parties

No advertising networks, no analytics SDKs, no crash-reporting SDKs, no social login, no tracking pixels. Nothing about you is sold, rented, traded or shared. The app's privacy manifest declares exactly one collected data type — product interaction, not linked to you and not used for tracking — and declares no tracking domains at all.

This website

shanhai.apps.topxup.com is a set of static pages. It sets no cookies, runs no analytics script and embeds nothing from a third-party host. Standard server logs kept by the hosting provider (Cloudflare) may record requests, as they do for any website.

Children

Shanhai is not directed at children under 13, and no data that could identify anyone of any age is collected.

Changes

If this policy changes, the updated version will be posted here with a new date, and any material change to what the app sends will also be surfaced inside the app. The version in the app is an offline copy of this page, so it can be read with no connection.

Contact

Fuuqiu@gmail.com — one person reads it.

← Back to Shanhai