CITT

    Scan results

    Clash Royale

    Android

    Clash Royale is a fast-paced collectible card game combining tower defense with multiplayer competitive gameplay. Raise your own legendary army and battle opponents in real-time matches. Experience strategic card game with intuitive touch controls and visually rich fantasy battles.

    CITT SCORE
    87
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Mobile gamers comfortable with standard analytics

    What It Means For You

    Gameplay activity and device details are shared with analytics and attribution services including AppsFlyer and Snowplow. Crash reports may be sent to Sentry. In-app purchases are processed through Google Play Billing.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (12)

    Data Security

    5 total
    2 High
    3 Medium

    Network Security

    1 total
    1 Medium

    Code Security

    2 total
    1 Medium
    1 Low

    Privacy

    4 total
    1 Medium
    3 Low

    Third-Party Services

    Google Play Billing, Google Play Games, Firebase Installations, Firebase Messaging, Sentry, AppsFlyer, Snowplow Analytics, Usercentrics, Helpshift, Promon SHIELD, reCAPTCHA

    Security Strengths

    • ✓EncryptedSharedPreferences with Android KeyStore (AES-256-GCM)
    • ✓HTTPS enforcement via Android 15 default policy
    • ✓No advertising networks detected
    • ✓Firebase Analytics explicitly disabled
    • ✓Usercentrics Consent Management Platform integrated
    • ✓Heavy code obfuscation with XOR string encryption
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    gaming
    social
    in app purchases
    analytics
    crash reporting
    cross app tracking

    Package

    com.supercell.clashroyale

    Version

    130300033

    Analysis Date

    Feb 15, 2026

    Classes Analyzed

    8,919

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 5 findings (2 high, 3 medium)

    Network Security - 1 finding (1 medium)

    Code Safety - 0 findings

    Privacy - 4 findings (1 medium, 3 low)

    Privacy Concerns

    What Data is Collected

    • Gameplay activity and session data
    • Device identifiers and hardware details
    • In-app purchase history
    • Crash reports and error logs
    • App installation and attribution data

    Third-Party Data Sharing

    ServicePurpose
    AppsFlyerInstall attribution and marketing analytics
    Snowplow AnalyticsBehavioral analytics and event tracking
    Firebase InstallationsDevice registration and messaging
    Firebase MessagingPush notifications
    SentryCrash reporting and error monitoring
    Google Play BillingIn-app purchase processing
    Google Play GamesGame progress and leaderboards
    UsercentricsConsent management
    HelpshiftIn-app customer support
    Promon SHIELDApp protection services
    reCAPTCHABot and fraud prevention

    Understanding the Scores

    CategoryScore
    Security82/100
    Privacy92/100
    Data Security78/100
    Network Security95/100
    Code Safety92/100
    Data Collection94/100
    Data Sharing93/100
    User Control92/100

    Positive Security Features

    • Built-in app protection against unauthorized modification via Promon SHIELD
    • Bot and fraud prevention through reCAPTCHA integration
    • Consent management via Usercentrics, giving users control over data preferences
    • Secure in-app purchase processing through Google Play Billing

    Areas for Improvement

    • Some data stored on the device could be better protected from access by other apps.
    • A small number of network connections use configurations that could be strengthened.
    • Minor improvements to how certain data is handled during transmission would further reduce risk.

    About This Analysis

    This scorecard reflects automated static analysis of the app's code and configuration. Scores represent observed security and privacy practices at the time of the analysis.

    App Details

    FieldValue
    Package IDcom.supercell.clashroyale
    Version130300033
    PlatformAndroid
    Scan DateFebruary 15, 2026
    Analysis TypeStatic Code Analysis

    Right of Reply

    Developer not yet contacted