Brotherhood Alchemist Security & Privacy Scorecard
by Dave Poirier · iOS
All gameplay activity remains on the device. No data is transmitted over the network, and no user information is retained after a session ends. UIDevice access is limited to detecting screen orientation for layout purposes.
Best for
Offline puzzle players who keep data on-device
Findings
- 0 critical
- 0 high
- 0 medium
- 1 low
- 6 info
1 issue identified across security and privacy analysis.
Top security issues
- No WebView Surface — Zero WKWebView, JS Bridge, or URL Scheme
- No Hardcoded Credentials or API Keys
- ATS Default Configuration — No Exceptions Declared
Top privacy issues
- Missing PrivacyInfo.xcprivacy — App Store Compliance Requirement
- No Third-Party SDKs — Minimal Third-Party Attack Surface
- UIDevice Accessed for Orientation Only — No Device Fingerprinting
Full analysis
Brotherhood Alchemist
What This Means for You
Your data stays entirely on your device, with nothing transmitted to any server or third party.
Recommendation: Very Secure
Exceptionally secure: fully offline with zero trackers, analytics, or data collection. All content stays entirely on your device.
Best For: Skyrim players wanting an offline alchemy reference with zero ads, trackers, or data collection
Key Findings
Data Security - 1 finding (1 info)
Network Security - 1 finding (1 info)
Code Safety - 2 findings (2 info)
Privacy - 3 findings (1 low, 2 info)
Privacy Concerns
What Data is Collected
- Device information: Device orientation is accessed on your device for layout adaptation only. Nothing is shared with any party.
Third-Party Data Sharing
The following third parties may receive your data:
No third-party data sharing was identified in this analysis.
Understanding the Scores
Security: 100/100
Privacy: 99/100
Security Breakdown
- Data Security: 100/100 - All game content stays in memory with no persistent storage or sensitive data written to your device.
- Network Security: 100/100 - Fully offline with no network calls. iOS secure connection requirements are enforced by default throughout.
- Code Safety: 100/100 - Built with minimal Apple frameworks only, with no embedded secrets and no browser surfaces.
Privacy Breakdown
- Data Collection: 99/100 - Nothing is collected or transmitted. Device orientation is read on your device only to adapt the layout.
- Data Sharing: 100/100 - No data is shared with any third party under any circumstances.
- User Control: 99/100 - No tracking, analytics, or advertising frameworks are present. You are in full control of your experience.
Positive Security Features
- Zero third-party SDKs: no trackers, analytics, or advertising libraries
- Fully offline: no network calls and nothing transmitted to any server
- All game state is in-memory: no user data retained on device after closing the app
- iOS secure connection defaults enforced with no exceptions
- No browser surface present: no web-based injection risks
- Device orientation accessed on-device only for layout adaptation, with no device fingerprinting
Areas for Improvement
GDPR / CCPA Compliance
The app's privacy practices could be strengthened by:
- App Privacy Manifest
Adding an app privacy manifest (PrivacyInfo.xcprivacy) could make the App Store privacy label more complete, even though no user data is collected or transmitted.
Security Enhancements
- Future Storage Practices
If future versions add user preferences or saved combinations, using iOS secure storage APIs would be a good practice.
Technical Context
App Type: Offline gaming reference tool
Classes Analyzed: 0
Third-Party Services: 0
Context Tags: gaming, offline
About This Analysis
This security analysis was conducted by CITT (Can I Trust That), an independent security analysis service. We perform static code analysis on iOS applications to help users make informed decisions about app security and privacy.
App Details
Developer: Not available
Version: 2.0 (build 202304101812)
Analysis Date: 2026-06-17
Package: io.soft.Brotherhood-Alchemist
Analysis Limitations
- Static analysis only (code review without running the app)
- Based on IPA version 2.0 analyzed on 2026-06-17
- May not reflect server-side security controls
- Cannot detect all runtime behaviors
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #15 (current) | 99/100 | |
| #14 | 100/100 |