CITT

    Scan results

    Brotherhood Alchemist

    iOS

    Reference guide for The Elder Scrolls: Skyrim alchemy. Browse ingredients, effects, recipes, and combinations offline and ad-free.

    TRUSTED

    This app cleared every trust check that applied to it, with no red flags.

    The five trust checks

    CITT SCORE
    99
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Offline puzzle players who keep data on-device

    What It Means For You

    All gameplay activity remains on the device. No data is transmitted over the network, and no user information is retained after a session ends. UIDevice access is limited to detecting screen orientation for layout purposes.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (7)

    Data Security

    1 total
    1 Info

    Network Security

    1 total
    1 Info

    Code Security

    2 total
    2 Info

    Privacy

    2 total
    1 Low
    1 Info

    Third-Party Risk

    1 total
    1 Info

    Security Strengths

    • ✓Zero third-party SDKs — no trackers, analytics, or advertising libraries
    • ✓Fully offline — no network calls, no data transmitted
    • ✓No persistent storage — no user data retained on device
    • ✓Strict ATS enforced by default — HTTPS-only with no exceptions
    • ✓No WebView or JS bridge — eliminates injection and URL-hijacking attack surface
    • ✓No device fingerprinting — UIDevice used only for orientation layout
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    gaming
    offline

    Package

    io.soft.Brotherhood-Alchemist

    Version

    2.0 (build 202304101812)

    Analysis Date

    Jun 17, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on App Store

    Recommendation: Very Secure

    Exceptionally secure: fully offline with zero trackers, analytics, or data collection. All content stays entirely on your device.

    Key Findings

    Data Security - 1 finding (1 info)

    Network Security - 1 finding (1 info)

    Code Safety - 2 findings (2 info)

    Privacy - 3 findings (1 low, 2 info)

    Privacy Concerns

    What Data is Collected

    • Device information: Device orientation is accessed on your device for layout adaptation only. Nothing is shared with any party.

    Third-Party Data Sharing

    The following third parties may receive your data:

    No third-party data sharing was identified in this analysis.

    Understanding the Scores

    Security: 100/100
    Privacy: 99/100

    Security Breakdown

    • Data Security: 100/100 - All game content stays in memory with no persistent storage or sensitive data written to your device.
    • Network Security: 100/100 - Fully offline with no network calls. iOS secure connection requirements are enforced by default throughout.
    • Code Safety: 100/100 - Built with minimal Apple frameworks only, with no embedded secrets and no browser surfaces.

    Privacy Breakdown

    • Data Collection: 99/100 - Nothing is collected or transmitted. Device orientation is read on your device only to adapt the layout.
    • Data Sharing: 100/100 - No data is shared with any third party under any circumstances.
    • User Control: 99/100 - No tracking, analytics, or advertising frameworks are present. You are in full control of your experience.

    Positive Security Features

    • Zero third-party SDKs: no trackers, analytics, or advertising libraries
    • Fully offline: no network calls and nothing transmitted to any server
    • All game state is in-memory: no user data retained on device after closing the app
    • iOS secure connection defaults enforced with no exceptions
    • No browser surface present: no web-based injection risks
    • Device orientation accessed on-device only for layout adaptation, with no device fingerprinting

    Areas for Improvement

    GDPR / CCPA Compliance

    The app's privacy practices could be strengthened by:

    1. App Privacy Manifest
      Adding an app privacy manifest (PrivacyInfo.xcprivacy) could make the App Store privacy label more complete, even though no user data is collected or transmitted.

    Security Enhancements

    1. Future Storage Practices
      If future versions add user preferences or saved combinations, using iOS secure storage APIs would be a good practice.

    Technical Context

    App Type: Offline gaming reference tool
    Classes Analyzed: 0
    Third-Party Services: 0
    Context Tags: gaming, offline

    About This Analysis

    This security analysis was conducted by CITT (Can I Trust That), an independent security analysis service. We perform static code analysis on iOS applications to help users make informed decisions about app security and privacy.

    App Details

    Developer: Not available
    Version: 2.0 (build 202304101812)
    Analysis Date: 2026-06-17
    Package: io.soft.Brotherhood-Alchemist

    Analysis Limitations

    • Static analysis only (code review without running the app)
    • Based on IPA version 2.0 analyzed on 2026-06-17
    • May not reflect server-side security controls
    • Cannot detect all runtime behaviors

    Right of Reply

    Developer not yet contacted