# Security & Privacy Scorecard

## Undercover™: Word Party Game

## What This Means for You

Gameplay behavior is tracked by Firebase Analytics and shared with Google AdMob and Unity Ads for targeted advertising. Account data is stored across multiple Firebase services. Users have very limited control over how their data is used or deleted.

## Recommendation: Use With Caution

**Best For:** Casual party gamers comfortable with ads and analytics

**Avoid If:** You want to play without targeted ads

## Key Findings

**Data Security** - 3 findings (1 critical, 1 high, 1 medium)

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 7 findings (1 critical, 3 high, 3 medium)

## Privacy Concerns

### What Data is Collected

- Account information managed through Firebase Auth and stored in Firebase Firestore and Firebase Realtime Database
- Gameplay behavior, session activity, and in-app events collected by Firebase Analytics
- Device identifiers and advertising IDs used to build a profile for targeted advertising
- App crash reports and performance data collected by Firebase Crashlytics
- In-app purchase and billing activity processed through Google Play Billing
- Push notification tokens managed through Firebase Cloud Messaging

### Third-Party Data Sharing

Data is shared with the following third parties:

- **Google AdMob** - Receives device and behavioral data for targeted ads
- **Unity Ads** - Receives gameplay and session data for targeted ads
- **Firebase (Google)** - Stores account, behavioral, and crash data across multiple Google-operated services
- **Google Play Billing** - Processes in-app purchase transactions

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 25/100 |
| Privacy | 20/100 |
| Data Security | 15/100 |
| Network Security | 30/100 |
| Code Safety | 25/100 |
| Data Collection | 35/100 |
| Data Sharing | 30/100 |
| User Control | 10/100 |

## Positive Security Features

- No notable positive security practices were identified for this app.

## Areas for Improvement

- Behavioral and device data is shared with multiple advertising networks, with no clear opt-out option or way to limit that sharing.
- Personal account data is distributed across several cloud services, increasing the number of parties that hold that information.
- The app provides minimal controls for reviewing, exporting, or deleting data, giving users very little say in how their information is managed.

---

## About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the app's data practices and security posture at the time of the scan.

### App Details

- **App:** Undercover™: Word Party Game
- **Package ID:** com.yanstarstudio.joss.undercover
- **Version:** 4.8.8 (Build 796)
- **Scan Date:** 2026-02-01