Undercover®: Word Party Game Security & Privacy Scorecard
Android
Gameplay behavior is tracked by Firebase Analytics and shared with Google AdMob and Unity Ads for targeted advertising. Account data is stored across multiple Firebase services. Users have very limited control over how their data is used or deleted.
Best for
Casual party gamers comfortable with ads and analytics
Avoid if
You want to play without targeted ads
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Cronet 72.x with Known RCE CVEs
- No Database Encryption
- Unity Ads WebView UXSS Vulnerability
Top privacy issues
- Analytics Enabled by Default Without Consent
- GDPR Compliance Failure
- COPPA Compliance Failure
Full analysis
Undercover™: Word Party Game
What This Means for You
Gameplay behavior is tracked by Firebase Analytics and shared with Google AdMob and Unity Ads for targeted advertising. Account data is stored across multiple Firebase services. Users have very limited control over how their data is used or deleted.
Recommendation: Use With Caution
Best For: Casual party gamers comfortable with ads and analytics
Avoid If: You want to play without targeted ads
Key Findings
Data Security - 3 findings (1 critical, 1 high, 1 medium)
Network Security - 0 findings
Code Safety - 0 findings
Privacy - 7 findings (1 critical, 3 high, 3 medium)
Privacy Concerns
What Data is Collected
- Account information managed through Firebase Auth and stored in Firebase Firestore and Firebase Realtime Database
- Gameplay behavior, session activity, and in-app events collected by Firebase Analytics
- Device identifiers and advertising IDs used to build a profile for targeted advertising
- App crash reports and performance data collected by Firebase Crashlytics
- In-app purchase and billing activity processed through Google Play Billing
- Push notification tokens managed through Firebase Cloud Messaging
Third-Party Data Sharing
Data is shared with the following third parties:
- Google AdMob - Receives device and behavioral data for targeted ads
- Unity Ads - Receives gameplay and session data for targeted ads
- Firebase (Google) - Stores account, behavioral, and crash data across multiple Google-operated services
- Google Play Billing - Processes in-app purchase transactions
Understanding the Scores
| Category | Score |
|---|---|
| Security | 25/100 |
| Privacy | 20/100 |
| Data Security | 15/100 |
| Network Security | 30/100 |
| Code Safety | 25/100 |
| Data Collection | 35/100 |
| Data Sharing | 30/100 |
| User Control | 10/100 |
Positive Security Features
- No notable positive security practices were identified for this app.
Areas for Improvement
- Behavioral and device data is shared with multiple advertising networks, with no clear opt-out option or way to limit that sharing.
- Personal account data is distributed across several cloud services, increasing the number of parties that hold that information.
- The app provides minimal controls for reviewing, exporting, or deleting data, giving users very little say in how their information is managed.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the app's data practices and security posture at the time of the scan.
App Details
- App: Undercover™: Word Party Game
- Package ID: com.yanstarstudio.joss.undercover
- Version: 4.8.8 (Build 796)
- Scan Date: 2026-02-01
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 22/100 |