v0.1.1

WWW > 0.1.1

Privacy

• App identifier blanked on every request. WebView tags every request with X-Requested-With: <package name> — a stable identifier that survives clearing cookies, changing the user agent, and incognito mode. www now blanks it for every request, including subresources (images, CSS, scripts, fonts), via WebView's profile-level custom-header API. Verified empty end-to-end. No exceptions, no toggle to turn it back on.
• User-agent spoofing now holds up under inspection. The UA templates (Chrome Android, Firefox Android, Desktop Safari, etc.) previously only rewrote the User-Agent string — the Sec-CH-UA client-hint headers still reported the real WebView engine underneath, so a site checking hints could see straight through the spoof. Each template now carries matching client-hint metadata.
• WebView usage-statistics upload to Google disabled, app-wide and unconditionally, regardless of the device's own diagnostics setting.
• data: page navigation blocked. A page (or the address bar) can no longer navigate to a data: URL as the whole document — the classic "paste this into your address bar" phishing shape, where the resulting page has no real origin for the URL bar to describe. Inline data: images and fonts are unaffected.

New

• Three light themes: Rosé Pine, Everforest, and Kanagawa — each with its own accent palette, alongside the existing System / Catppuccin / Dracula / Ptyxis 30+ set.
• Long-press menu for links and images: open in a background tab, or copy the address. Works the same on plain links and on images wrapped in a link (e.g. image search results).

Fixed

• The top bar's rounded corners no longer flash the wrong colour when switching pages, especially under force-dark or a slow-loading page.
• Settings now opens with every section collapsed, so it reads as an index instead of a wall of switches. Font Family and Text Size — previously two rows with no section header at all — now live under their own Text section.
• About now shows the installed version number.

Performance

• Removed a per-request string-allocation hot spot in the tracker blocker.
• The third-party-request check no longer re-derives the page's registrable domain on every subresource.
• Dropped a blanket ProGuard/R8 keep rule that exempted the entire Kotlin standard library from shrinking.