# Security & Privacy Scorecard

## Brotherhood Alchemist

## What This Means for You

Your data stays entirely on your device, with nothing transmitted to any server or third party.

## Recommendation: Very Secure

Exceptionally secure: fully offline with zero trackers, analytics, or data collection. All content stays entirely on your device.

**Best For:** Skyrim players wanting an offline alchemy reference with zero ads, trackers, or data collection

## Key Findings

**Data Security** - 1 finding (1 info)

**Network Security** - 1 finding (1 info)

**Code Safety** - 2 findings (2 info)

**Privacy** - 3 findings (1 low, 2 info)

## Privacy Concerns

### What Data is Collected

- Device information: Device orientation is accessed on your device for layout adaptation only. Nothing is shared with any party.

### Third-Party Data Sharing

**The following third parties may receive your data:**

No third-party data sharing was identified in this analysis.

## Understanding the Scores

**Security:** 100/100
**Privacy:** 99/100

### Security Breakdown

- **Data Security:** 100/100 - All game content stays in memory with no persistent storage or sensitive data written to your device.
- **Network Security:** 100/100 - Fully offline with no network calls. iOS secure connection requirements are enforced by default throughout.
- **Code Safety:** 100/100 - Built with minimal Apple frameworks only, with no embedded secrets and no browser surfaces.

### Privacy Breakdown

- **Data Collection:** 99/100 - Nothing is collected or transmitted. Device orientation is read on your device only to adapt the layout.
- **Data Sharing:** 100/100 - No data is shared with any third party under any circumstances.
- **User Control:** 99/100 - No tracking, analytics, or advertising frameworks are present. You are in full control of your experience.

## Positive Security Features

- Zero third-party SDKs: no trackers, analytics, or advertising libraries
- Fully offline: no network calls and nothing transmitted to any server
- All game state is in-memory: no user data retained on device after closing the app
- iOS secure connection defaults enforced with no exceptions
- No browser surface present: no web-based injection risks
- Device orientation accessed on-device only for layout adaptation, with no device fingerprinting

## Areas for Improvement

### GDPR / CCPA Compliance

The app's privacy practices could be strengthened by:

1. **App Privacy Manifest**
   Adding an app privacy manifest (PrivacyInfo.xcprivacy) could make the App Store privacy label more complete, even though no user data is collected or transmitted.

### Security Enhancements

1. **Future Storage Practices**
   If future versions add user preferences or saved combinations, using iOS secure storage APIs would be a good practice.

## Technical Context

**App Type:** Offline gaming reference tool
**Classes Analyzed:** 0
**Third-Party Services:** 0
**Context Tags:** gaming, offline

---

## About This Analysis

This security analysis was conducted by CITT (Can I Trust That), an independent security analysis service. We perform static code analysis on iOS applications to help users make informed decisions about app security and privacy.

### App Details

**Developer:** Not available
**Version:** 2.0 (build 202304101812)
**Analysis Date:** 2026-06-17
**Package:** io.soft.Brotherhood-Alchemist

### Analysis Limitations

- Static analysis only (code review without running the app)
- Based on IPA version 2.0 analyzed on 2026-06-17
- May not reflect server-side security controls
- Cannot detect all runtime behaviors