Undercover®: Word Party Game Security & Privacy Scorecard

Android

22
Overall trust score
Don't Trust
25
Security
20
Privacy

Gameplay behavior is tracked by Firebase Analytics and shared with Google AdMob and Unity Ads for targeted advertising. Account data is stored across multiple Firebase services. Users have very limited control over how their data is used or deleted.

Best for

Casual party gamers comfortable with ads and analytics

Avoid if

You want to play without targeted ads

Findings

  • 0 critical
  • 0 high
  • 0 medium
  • 0 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • Cronet 72.x with Known RCE CVEs
  • No Database Encryption
  • Unity Ads WebView UXSS Vulnerability

Top privacy issues

  • Analytics Enabled by Default Without Consent
  • GDPR Compliance Failure
  • COPPA Compliance Failure

Full analysis

Undercover™: Word Party Game

What This Means for You

Gameplay behavior is tracked by Firebase Analytics and shared with Google AdMob and Unity Ads for targeted advertising. Account data is stored across multiple Firebase services. Users have very limited control over how their data is used or deleted.

Recommendation: Use With Caution

Best For: Casual party gamers comfortable with ads and analytics

Avoid If: You want to play without targeted ads

Key Findings

Data Security - 3 findings (1 critical, 1 high, 1 medium)

Network Security - 0 findings

Code Safety - 0 findings

Privacy - 7 findings (1 critical, 3 high, 3 medium)

Privacy Concerns

What Data is Collected

  • Account information managed through Firebase Auth and stored in Firebase Firestore and Firebase Realtime Database
  • Gameplay behavior, session activity, and in-app events collected by Firebase Analytics
  • Device identifiers and advertising IDs used to build a profile for targeted advertising
  • App crash reports and performance data collected by Firebase Crashlytics
  • In-app purchase and billing activity processed through Google Play Billing
  • Push notification tokens managed through Firebase Cloud Messaging

Third-Party Data Sharing

Data is shared with the following third parties:

  • Google AdMob - Receives device and behavioral data for targeted ads
  • Unity Ads - Receives gameplay and session data for targeted ads
  • Firebase (Google) - Stores account, behavioral, and crash data across multiple Google-operated services
  • Google Play Billing - Processes in-app purchase transactions

Understanding the Scores

Category Score
Security 25/100
Privacy 20/100
Data Security 15/100
Network Security 30/100
Code Safety 25/100
Data Collection 35/100
Data Sharing 30/100
User Control 10/100

Positive Security Features

  • No notable positive security practices were identified for this app.

Areas for Improvement

  • Behavioral and device data is shared with multiple advertising networks, with no clear opt-out option or way to limit that sharing.
  • Personal account data is distributed across several cloud services, increasing the number of parties that hold that information.
  • The app provides minimal controls for reviewing, exporting, or deleting data, giving users very little say in how their information is managed.

About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the app's data practices and security posture at the time of the scan.

App Details

  • App: Undercover™: Word Party Game
  • Package ID: com.yanstarstudio.joss.undercover
  • Version: 4.8.8 (Build 796)
  • Scan Date: 2026-02-01

Versions & scan history

ScanDateOverall score
#1 (current) 22/100