CITT

    Scan results

    Clash of Clans

    Android

    Clash of Clans is a strategy game where players build and battle in a medieval fantasy world. Rated 4.5 stars by 61.6M users. Developed by Supercell, it features in-app purchases, multiplayer battles, and competitive gameplay across single-player and multiplayer modes.

    CITT SCORE
    80
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Casual gamers who enjoy competitive strategy

    What It Means For You

    Gameplay activity, device details, and in-app purchases are tracked by analytics services including AppsFlyer and Snowplow to measure engagement and ad performance. User data is not shared with third parties for advertising beyond these analytics providers. Network connections are well protected, and users retain meaningful control over their data.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (13)

    Data Security

    5 total
    1 High
    3 Medium
    1 Low

    Network Security

    2 total
    1 Medium
    1 Low

    Code Security

    2 total
    2 Medium

    Privacy

    4 total
    1 High
    1 Medium
    2 Low

    Third-Party Services

    Sentry, AppsFlyer, Snowplow, Usercentrics, Firebase Messaging, Firebase Analytics, Firebase Installations, Google Play Games, Google Play Billing, Helpshift, FMOD, Promon SHIELD, Supercell ID, Quago

    Security Strengths

    • ✓Usercentrics CMP Integration for GDPR/CCPA compliance
    • ✓Firebase Analytics disabled by default
    • ✓Supercell ID uses EncryptedSharedPreferences with KeyStore-backed AES256-GCM
    • ✓Respects 'Limit Ad Tracking' device-level privacy signal
    • ✓All third-party SDK endpoints use HTTPS
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    gaming
    social
    ads
    sensitive data
    third party sdks
    analytics
    anti cheat

    Package

    com.supercell.clashofclans

    Version

    18.200.19

    Analysis Date

    Mar 27, 2026

    Classes Analyzed

    11,470

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 5 findings (1 high, 3 medium, 1 low)

    Network Security - 2 findings (1 medium, 1 low)

    Code Safety - 0 findings

    Privacy - 4 findings (1 high, 1 medium, 2 low)

    Privacy Concerns

    What Data is Collected

    The app collects gameplay activity, device identifiers, and in-app purchase history. This information is used to personalize the user experience and measure how users interact with the game over time. Device details such as hardware identifiers are also gathered by analytics providers at session start.

    Third-Party Data Sharing

    Activity data is shared with AppsFlyer and Snowplow for engagement measurement and advertising performance analysis. Firebase Analytics and Quago also receive behavioral data during play sessions. No data is sold or shared with advertising networks beyond these analytics providers.

    Understanding the Scores

    • Security: 78/100
    • Privacy: 84/100
    • Data Security: 75/100
    • Network Security: 94/100
    • Code Safety: 95/100
    • Data Collection: 85/100
    • Data Sharing: 100/100
    • User Control: 88/100

    Positive Security Features

    • Active integrity protection via Promon SHIELD helps defend the app against unauthorized modification
    • Network communications use strong protection, keeping connections to game servers secure
    • Code integrity is maintained at a high standard, with minimal risk from unsafe code patterns
    • No data is transferred to third-party advertising networks, keeping user information within a controlled set of analytics providers
    • Usercentrics integration provides a consent management layer, giving users some control over data collection preferences

    Areas for Improvement

    • Some data stored locally on the device could benefit from stronger protection, reducing the chance that sensitive game or account information is accessible if the device is accessed by others.
    • The range of analytics services collecting behavioral data is broad; consolidating these services would reduce the amount of information shared outside the app.
    • Certain device-level identifiers are collected in ways that could allow user activity to be tracked across sessions or linked to other apps over time, which goes beyond what is needed purely for gameplay.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the app's practices at the time of the scan and may change as the app is updated. This report is intended to help users make an informed decision and does not constitute a guarantee of security.

    App Details

    • Package: com.supercell.clashofclans
    • Version: 18.200.19
    • Scan Date: 2026-03-27

    Right of Reply

    Developer not yet contacted