Pokémon TCG Pocket - Card Game Security & Privacy Scorecard

Pokémon TCG Pocket - Card Game

What This Means for You

Gameplay activity is tracked by Firebase Analytics, and install source is logged by Adjust, an advertising attribution service. In-app purchases go through Google Play Billing. The app has notable limitations in how it stores and protects game data and account information.

Recommendation: Use With Caution

Best For: Pokémon card fans comfortable with standard analytics

Key Findings

Data Security - 9 findings (1 critical, 3 high, 3 medium, 2 low)

Network Security - 4 findings (3 medium, 1 low)

Code Safety - 0 findings

Privacy - 5 findings (3 high, 2 low)

Privacy Concerns

What Data is Collected

The app collects gameplay activity, device identifiers, advertising IDs, and in-app purchase history. Firebase Analytics records which features are used and how long sessions last. Adjust logs data about install source for advertising attribution purposes.

Third-Party Data Sharing

Data is shared with the following third-party services:

• Firebase Analytics (Google): Receives gameplay behavior and device information for analytics and reporting.
• Adjust: Receives device identifiers and install source to attribute the download to an advertising campaign.
• Google Play Billing: Processes in-app purchase transactions.
• Nintendo Platform Framework SDK: Provides platform-level services and handles account-related data on Nintendo's behalf.

Understanding the Scores

Positive Security Features

• Network communications use HTTPS, keeping data in transit protected between the device and the app's servers.

Areas for Improvement

• Game data and account information are stored without adequate protection, leaving them more accessible than expected if a device is lost or accessed by someone else.
• Device identifiers are shared with an advertising attribution service, with limited options to opt out from within the app.
• Users have little control over how gameplay data is collected and processed by third-party analytics services built into the app.

About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. It reflects what the app is built to do based on its installed code.

App Details