Clash of Clans Security & Privacy Scorecard
Android
Gameplay activity, device details, and in-app purchases are tracked by analytics services including AppsFlyer and Snowplow to measure engagement and ad performance. User data is not shared with third parties for advertising beyond these analytics providers. Network connections are well protected, and users retain meaningful control over their data.
Best for
Casual gamers who enjoy competitive strategy
Findings
- 0 critical
- 2 high
- 7 medium
- 4 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Google Play Games Tokens Stored in Plaintext
- Hardcoded Encryption IV in Custom SecurePreferences
- JavaScript Bridge Exposure in WebView
Top privacy issues
- Pre-Consent Analytics Initialization Timing Gap
- Quago SDK Invasive Device Fingerprinting Without Explicit Consent
- Incomplete Backup Exclusion Rules
Full analysis
What This Means for You
Gameplay activity, device details, and in-app purchases are tracked by analytics services including AppsFlyer and Snowplow to measure engagement and ad performance. User data is not shared with third parties for advertising beyond these analytics providers. Network connections are well protected, and users retain meaningful control over their data.
Recommendation: Trustworthy
Best For: Casual gamers who enjoy competitive strategy
Key Findings
Data Security - 5 findings (1 high, 3 medium, 1 low)
Network Security - 2 findings (1 medium, 1 low)
Code Safety - 0 findings
Privacy - 4 findings (1 high, 1 medium, 2 low)
Privacy Concerns
What Data is Collected
The app collects gameplay activity, device identifiers, and in-app purchase history. This information is used to personalize the user experience and measure how users interact with the game over time. Device details such as hardware identifiers are also gathered by analytics providers at session start.
Third-Party Data Sharing
Activity data is shared with AppsFlyer and Snowplow for engagement measurement and advertising performance analysis. Firebase Analytics and Quago also receive behavioral data during play sessions. No data is sold or shared with advertising networks beyond these analytics providers.
Understanding the Scores
- Security: 78/100
- Privacy: 84/100
- Data Security: 75/100
- Network Security: 94/100
- Code Safety: 95/100
- Data Collection: 85/100
- Data Sharing: 100/100
- User Control: 88/100
Positive Security Features
- Active integrity protection via Promon SHIELD helps defend the app against unauthorized modification
- Network communications use strong protection, keeping connections to game servers secure
- Code integrity is maintained at a high standard, with minimal risk from unsafe code patterns
- No data is transferred to third-party advertising networks, keeping user information within a controlled set of analytics providers
- Usercentrics integration provides a consent management layer, giving users some control over data collection preferences
Areas for Improvement
- Some data stored locally on the device could benefit from stronger protection, reducing the chance that sensitive game or account information is accessible if the device is accessed by others.
- The range of analytics services collecting behavioral data is broad; consolidating these services would reduce the amount of information shared outside the app.
- Certain device-level identifiers are collected in ways that could allow user activity to be tracked across sessions or linked to other apps over time, which goes beyond what is needed purely for gameplay.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the app's practices at the time of the scan and may change as the app is updated. This report is intended to help users make an informed decision and does not constitute a guarantee of security.
App Details
- Package: com.supercell.clashofclans
- Version: 18.200.19
- Scan Date: 2026-03-27
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 80/100 |