In a privateness replace revealed Dec. 6, ConsenSys, the developer of the favored MetaMask browser pockets, mentioned it could scale back its retention of person knowledge akin to pockets addresses and IP addresses to seven days. Beforehand on Nov. 24, ConsenSys up to date its privateness coverage to make clear how Infura, or MetaMask’s default Distant Process Name (RPC), works with person knowledge akin to together with IP addresses. The revelation sparked controversy within the crypto group concerning privateness issues, main the agency to make clear that IP addresses collected by way of MetaMask won’t be monetized or “exploited.”
We’re dedicated to defending the privateness of MetaMask customers. Final month, the ConsenSys privateness coverage replace raised questions and misconceptions.
We heard you, went to work, and want to share some necessary clarifications and updates https://t.co/5HGlWFuIEq
— MetaMask (@MetaMask) December 6, 2022
In at present’s replace, ConsenSys additional elaborated that it doesn’t retailer MetaMask pockets data when customers make “learn” requests by way of Infura, akin to logging in to examine their account stability. As an alternative, customers’ IP and pockets addresses are solely logged after “write” requests by making transactions by way of Infura’s RPC endpoints. ConsenSys additionally claims the 2 knowledge sorts should not saved collectively to permit its techniques to inference from them.
After group suggestions, the agency mentioned it could be constructing a brand new superior settings web page to present all new customers the chance to decide on their very own RPC throughout onboarding and thereafter. Customers have the choice to opt-out of Infura and select a third-party RPC. Nevertheless, ConsenSys warned that:
“From a privateness perspective, we warning that these options could not truly present extra privateness; alternate RPC suppliers have totally different privateness insurance policies and knowledge practices, and self-hosting a node could make it even simpler for individuals to affiliate your Ethereum accounts together with your IP tackle.”
