CITT

    Scan results

    Undercover®: Word Party Game

    Android

    Undercover™: Word Party Game is a casual multiplayer board game where players compete in word-guessing rounds. Enjoy single-player, multiplayer, and offline modes with friends and family. Available on 5M+ devices. Rated 4.7 stars.

    CITT SCORE
    22
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Casual party gamers comfortable with ads and analytics

    Not For: You want to play without targeted ads

    What It Means For You

    Gameplay behavior is tracked by Firebase Analytics and shared with Google AdMob and Unity Ads for targeted advertising. Account data is stored across multiple Firebase services. Users have very limited control over how their data is used or deleted.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (16)

    Data Security

    3 total
    1 Critical
    1 High
    1 Medium

    Code Security

    5 total
    4 High
    1 Medium

    Privacy

    7 total
    1 Critical
    3 High
    3 Medium

    Third-Party Risk

    1 total
    1 Critical

    Third-Party Services

    Firebase Auth, Firebase Firestore, Firebase Realtime Database, Firebase Storage, Firebase Cloud Messaging, Firebase Remote Config, Firebase Crashlytics, Firebase Analytics, Firebase App Check, Unity Ads, Google AdMob, Google Play Billing

    Security Strengths

    • ✓R8 code obfuscation enabled
    • ✓Firebase App Check (Play Integrity) implemented
    • ✓Target SDK 35 (Android 15) - modern platform targeting
    • ✓Firebase BOM versioning ensures up-to-date Firebase SDKs
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    multiplayer
    ads
    in app purchases
    analytics tracking
    outdated dependencies
    gdpr noncompliant
    coppa noncompliant

    Package

    com.yanstarstudio.joss.undercover

    Version

    4.8.8 (Build 796)

    Analysis Date

    Feb 1, 2026

    Classes Analyzed

    17,728

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (1 critical, 1 high, 1 medium)

    Network Security - 0 findings

    Code Safety - 0 findings

    Privacy - 7 findings (1 critical, 3 high, 3 medium)

    Privacy Concerns

    What Data is Collected

    • Account information managed through Firebase Auth and stored in Firebase Firestore and Firebase Realtime Database
    • Gameplay behavior, session activity, and in-app events collected by Firebase Analytics
    • Device identifiers and advertising IDs used to build a profile for targeted advertising
    • App crash reports and performance data collected by Firebase Crashlytics
    • In-app purchase and billing activity processed through Google Play Billing
    • Push notification tokens managed through Firebase Cloud Messaging

    Third-Party Data Sharing

    Data is shared with the following third parties:

    • Google AdMob - Receives device and behavioral data for targeted ads
    • Unity Ads - Receives gameplay and session data for targeted ads
    • Firebase (Google) - Stores account, behavioral, and crash data across multiple Google-operated services
    • Google Play Billing - Processes in-app purchase transactions

    Understanding the Scores

    CategoryScore
    Security25/100
    Privacy20/100
    Data Security15/100
    Network Security30/100
    Code Safety25/100
    Data Collection35/100
    Data Sharing30/100
    User Control10/100

    Positive Security Features

    • No notable positive security practices were identified for this app.

    Areas for Improvement

    • Behavioral and device data is shared with multiple advertising networks, with no clear opt-out option or way to limit that sharing.
    • Personal account data is distributed across several cloud services, increasing the number of parties that hold that information.
    • The app provides minimal controls for reviewing, exporting, or deleting data, giving users very little say in how their information is managed.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the app's data practices and security posture at the time of the scan.

    App Details

    • App: Undercover™: Word Party Game
    • Package ID: com.yanstarstudio.joss.undercover
    • Version: 4.8.8 (Build 796)
    • Scan Date: 2026-02-01

    Right of Reply

    Developer not yet contacted