CITT

    Scan results

    Pokémon TCG Pocket - Card Game

    Android

    Pokémon TCG Pocket is a digital trading card game where players collect, build decks, and battle using Pokémon cards. Features card collecting, deck building, and competitive gameplay.

    CITT SCORE
    42
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Pokémon card fans comfortable with standard analytics

    What It Means For You

    Gameplay activity is tracked by Firebase Analytics, and install source is logged by Adjust, an advertising attribution service. In-app purchases go through Google Play Billing. The app has notable limitations in how it stores and protects game data and account information.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (29)

    Data Security

    9 total
    1 Critical
    3 High
    3 Medium
    2 Low

    Network Security

    4 total
    3 Medium
    1 Low

    Code Security

    9 total
    1 Critical
    3 High
    4 Medium
    1 Low

    Privacy

    5 total
    3 High
    2 Low

    Third-Party Risk

    1 total
    1 Low

    Permission Usage

    1 total
    1 Medium

    Third-Party Services

    Nintendo Platform Framework SDK, Firebase Analytics, Firebase Remote Config, Adjust SDK, Google Play Billing, Unity WebView Plugin
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    child targeted
    sensitive data
    in app purchases
    social
    ads
    analytics

    Package

    jp.pokemon.pokemontcgp

    Version

    1.4.1 (Build 223232)

    Analysis Date

    Dec 18, 2025

    Classes Analyzed

    15,847

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 9 findings (1 critical, 3 high, 3 medium, 2 low)

    Network Security - 4 findings (3 medium, 1 low)

    Code Safety - 0 findings

    Privacy - 5 findings (3 high, 2 low)

    Privacy Concerns

    What Data is Collected

    The app collects gameplay activity, device identifiers, advertising IDs, and in-app purchase history. Firebase Analytics records which features are used and how long sessions last. Adjust logs data about install source for advertising attribution purposes.

    Third-Party Data Sharing

    Data is shared with the following third-party services:

    • Firebase Analytics (Google): Receives gameplay behavior and device information for analytics and reporting.
    • Adjust: Receives device identifiers and install source to attribute the download to an advertising campaign.
    • Google Play Billing: Processes in-app purchase transactions.
    • Nintendo Platform Framework SDK: Provides platform-level services and handles account-related data on Nintendo's behalf.

    Understanding the Scores

    CategoryScore
    Overall Security38/100
    Overall Privacy45/100
    Data Security35/100
    Network Security68/100
    Code Safety40/100
    Data Collection50/100
    Data Sharing55/100
    User Control40/100

    Positive Security Features

    • Network communications use HTTPS, keeping data in transit protected between the device and the app's servers.

    Areas for Improvement

    • Game data and account information are stored without adequate protection, leaving them more accessible than expected if a device is lost or accessed by someone else.
    • Device identifiers are shared with an advertising attribution service, with limited options to opt out from within the app.
    • Users have little control over how gameplay data is collected and processed by third-party analytics services built into the app.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. It reflects what the app is built to do based on its installed code.

    App Details

    FieldValue
    App NamePokémon TCG Pocket - Card Game
    Package IDjp.pokemon.pokemontcgp
    Version1.4.1 (Build 223232)
    PlatformAndroid
    Scan DateDecember 18, 2025

    Right of Reply

    Developer not yet contacted