Brotherhood Alchemist Security & Privacy Scorecard

by Dave Poirier · iOS

99
Overall trust score
Very Secure
100
Security
99
Privacy

All gameplay activity remains on the device. No data is transmitted over the network, and no user information is retained after a session ends. UIDevice access is limited to detecting screen orientation for layout purposes.

Best for

Offline puzzle players who keep data on-device

Findings

  • 0 critical
  • 0 high
  • 0 medium
  • 1 low
  • 6 info

1 issue identified across security and privacy analysis.

Top security issues

  • No WebView Surface — Zero WKWebView, JS Bridge, or URL Scheme
  • No Hardcoded Credentials or API Keys
  • ATS Default Configuration — No Exceptions Declared

Top privacy issues

  • Missing PrivacyInfo.xcprivacy — App Store Compliance Requirement
  • No Third-Party SDKs — Minimal Third-Party Attack Surface
  • UIDevice Accessed for Orientation Only — No Device Fingerprinting

Full analysis

Brotherhood Alchemist

What This Means for You

Your data stays entirely on your device, with nothing transmitted to any server or third party.

Recommendation: Very Secure

Exceptionally secure: fully offline with zero trackers, analytics, or data collection. All content stays entirely on your device.

Best For: Skyrim players wanting an offline alchemy reference with zero ads, trackers, or data collection

Key Findings

Data Security - 1 finding (1 info)

Network Security - 1 finding (1 info)

Code Safety - 2 findings (2 info)

Privacy - 3 findings (1 low, 2 info)

Privacy Concerns

What Data is Collected

  • Device information: Device orientation is accessed on your device for layout adaptation only. Nothing is shared with any party.

Third-Party Data Sharing

The following third parties may receive your data:

No third-party data sharing was identified in this analysis.

Understanding the Scores

Security: 100/100
Privacy: 99/100

Security Breakdown

  • Data Security: 100/100 - All game content stays in memory with no persistent storage or sensitive data written to your device.
  • Network Security: 100/100 - Fully offline with no network calls. iOS secure connection requirements are enforced by default throughout.
  • Code Safety: 100/100 - Built with minimal Apple frameworks only, with no embedded secrets and no browser surfaces.

Privacy Breakdown

  • Data Collection: 99/100 - Nothing is collected or transmitted. Device orientation is read on your device only to adapt the layout.
  • Data Sharing: 100/100 - No data is shared with any third party under any circumstances.
  • User Control: 99/100 - No tracking, analytics, or advertising frameworks are present. You are in full control of your experience.

Positive Security Features

  • Zero third-party SDKs: no trackers, analytics, or advertising libraries
  • Fully offline: no network calls and nothing transmitted to any server
  • All game state is in-memory: no user data retained on device after closing the app
  • iOS secure connection defaults enforced with no exceptions
  • No browser surface present: no web-based injection risks
  • Device orientation accessed on-device only for layout adaptation, with no device fingerprinting

Areas for Improvement

GDPR / CCPA Compliance

The app's privacy practices could be strengthened by:

  1. App Privacy Manifest
    Adding an app privacy manifest (PrivacyInfo.xcprivacy) could make the App Store privacy label more complete, even though no user data is collected or transmitted.

Security Enhancements

  1. Future Storage Practices
    If future versions add user preferences or saved combinations, using iOS secure storage APIs would be a good practice.

Technical Context

App Type: Offline gaming reference tool
Classes Analyzed: 0
Third-Party Services: 0
Context Tags: gaming, offline


About This Analysis

This security analysis was conducted by CITT (Can I Trust That), an independent security analysis service. We perform static code analysis on iOS applications to help users make informed decisions about app security and privacy.

App Details

Developer: Not available
Version: 2.0 (build 202304101812)
Analysis Date: 2026-06-17
Package: io.soft.Brotherhood-Alchemist

Analysis Limitations

  • Static analysis only (code review without running the app)
  • Based on IPA version 2.0 analyzed on 2026-06-17
  • May not reflect server-side security controls
  • Cannot detect all runtime behaviors

Versions & scan history

ScanDateOverall score
#15 (current) 99/100
#14 100/100