In a privateness replace revealed Dec. 6, ConsenSys, the developer of the favored MetaMask browser pockets, mentioned it could scale back its retention of consumer information comparable to pockets addresses and IP addresses to seven days. Beforehand on Nov. 24, ConsenSys up to date its privateness coverage to make clear how Infura, or MetaMask’s default Distant Process Name (RPC), works with consumer information comparable to together with IP addresses. The revelation sparked controversy within the crypto neighborhood concerning privateness considerations, main the agency to make clear that IP addresses collected by way of MetaMask won’t be monetized or “exploited.”
We’re dedicated to defending the privateness of MetaMask customers. Final month, the ConsenSys privateness coverage replace raised questions and misconceptions.
We heard you, went to work, and wish to share some vital clarifications and updates https://t.co/5HGlWFuIEq
— MetaMask (@MetaMask) December 6, 2022
In right this moment’s replace, ConsenSys additional elaborated that it doesn’t retailer MetaMask pockets data when customers make “learn” requests by way of Infura, comparable to logging in to verify their account steadiness. As an alternative, customers’ IP and pockets addresses are solely logged after “write” requests by making transactions by way of Infura’s RPC endpoints. ConsenSys additionally claims the 2 information sorts should not saved collectively to permit its techniques to inference from them.
After neighborhood suggestions, the agency mentioned it could be constructing a brand new superior settings web page to offer all new customers the chance to decide on their very own RPC throughout onboarding and thereafter. Customers have the choice to opt-out of Infura and select a third-party RPC. Nevertheless, ConsenSys warned that:
“From a privateness perspective, we warning that these options could not really present extra privateness; alternate RPC suppliers have totally different privateness insurance policies and information practices, and self-hosting a node could make it even simpler for individuals to affiliate your Ethereum accounts together with your IP tackle.”
