CITT

    Scan results

    El Martillazo

    Android

    Buy cattle at live auctions from home with bidding, chat, purchase history and more. Secure transactions for livestock sales with stable internet connection required.

    CITT SCORE
    78
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Shoppers comfortable with standard Google analytics

    What It Means For You

    Browsing and shopping activity is tracked by Firebase Analytics and Google Advertising and can be used to target ads. Google Tag Manager is also present, meaning the data collected can be adjusted remotely without a new app release. Two critical data-handling issues were found, and user data may not be fully protected.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (22)

    Data Security

    4 total
    2 Critical
    1 Medium
    1 Low

    Network Security

    2 total
    2 High

    Code Security

    6 total
    2 High
    4 Medium

    Privacy

    3 total
    2 High
    1 Medium

    Third-Party Risk

    6 total
    2 Medium
    4 Low

    Permission Usage

    1 total
    1 Low

    Third-Party Services

    Firebase Firestore, Firebase Authentication, Firebase Cloud Messaging, Firebase Crashlytics, Firebase Performance Monitoring, Firebase Analytics, Firebase Remote Config, Firebase Cloud Functions, Google Play Services, Google Tag Manager, Google Advertising, Apache Cordova, Ionic Framework

    Security Strengths

    • ✓Proper SSL/TLS validation with no bypass mechanisms
    • ✓Modern biometric authentication using AndroidX BiometricPrompt
    • ✓Cordova bridge secret token authentication prevents unauthorized plugin access
    • ✓Secure default WebView settings (form data autofill disabled, insecure file access disabled)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    ads
    camera
    location
    biometric

    Package

    com.sivarsas.webiid.elmartillazo

    Version

    1.1.57

    Analysis Date

    Feb 6, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (2 critical, 1 medium, 1 low)

    Network Security - 2 findings (2 high)

    Code Safety - 0 findings

    Privacy - 3 findings (2 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    The app collects browsing and shopping behavior, app usage patterns, device identifiers, and performance metrics. Firebase Analytics and Firebase Performance Monitoring record how users interact with the app, while Firebase Crashlytics gathers technical details about the device when the app encounters problems. Google Advertising uses this activity data to build a profile that informs ad targeting.

    Third-Party Data Sharing

    Activity data is shared across multiple Google-owned services, including Firebase Analytics, Google Advertising, and Google Tag Manager. Google Tag Manager is particularly notable because it allows the developer to change what data is collected without releasing a new version of the app. Firebase Cloud Functions and Firebase Remote Config also send and receive data through Google's infrastructure.

    Understanding the Scores

    CategoryScore
    Security75/100
    Privacy80/100
    Data Security70/100
    Network Security80/100
    Code Safety82/100
    Data Collection85/100
    Data Sharing85/100
    User Control82/100

    Positive Security Features

    • No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • Protection of sensitive information stored on the device should be strengthened, particularly given the two critical data-handling issues identified.
    • Network communications could be better secured, as user data may travel with less protection than expected on public networks.
    • More transparent and accessible controls over advertising and behavioral data collection would give users a clearer picture of how their information is used.

    About This Analysis

    This scorecard is generated from automated static analysis of the app's code and configuration. Scores and findings reflect the state of the app at the time of the scan and may not capture changes introduced in later updates.

    App Details

    • App: El Martillazo
    • Package: com.sivarsas.webiid.elmartillazo
    • Version: 1.1.57
    • Scan Date: 2026-02-06

    Right of Reply

    Developer not yet contacted