ConsenSys will shorten MetaMask data retention to 7 days following privacy discourse

1 year ago

The steadfast sparked contention past period aft disclosing MetaMask's information postulation practices.

ConsenSys volition shorten MetaMask information retention to 7 days pursuing privateness discourse

Own this portion of crypto past

In a privateness update published Dec. 6, ConsenSys, the developer of the fashionable MetaMask browser wallet, said it would trim its retention of idiosyncratic information specified arsenic wallet addresses and IP addresses to 7 days. Previously connected Nov. 24, ConsenSys updated its privateness argumentation to clarify however Infura, oregon MetaMask's default Remote Procedure Call (RPC), works with idiosyncratic information specified arsenic including IP addresses. The revelation sparked contention successful the crypto assemblage regarding privateness concerns, starring the steadfast to clarify that IP addresses collected done MetaMask volition not beryllium monetized oregon "exploited."

We are committed to protecting the privateness of MetaMask users. Last month, the ConsenSys privateness argumentation update raised questions and misconceptions.

We heard you, went to work, and would similar to stock immoderate important clarifications and updates https://t.co/5HGlWFuIEq

— MetaMask (@MetaMask) December 6, 2022

In today's update, ConsenSys further elaborated that it does not store MetaMask wallet accusation erstwhile users marque "read" requests done Infura, specified arsenic logging successful to cheque their relationship balance. Instead, users' IP and wallet addresses are lone logged aft "write" requests by making transactions done Infura's RPC endpoints. ConsenSys besides claims the 2 information types are not stored unneurotic to let its systems to inference from them.

After assemblage feedback, the steadfast said it would beryllium gathering a caller precocious settings leafage to springiness each caller users the accidental to take their ain RPC during onboarding and thereafter. Users person the enactment to opt-out of Infura and take a third-party RPC. However, ConsenSys warned that:

"From a privateness perspective, we caution that these alternatives whitethorn not really supply much privacy; alternate RPC providers person antithetic privateness policies and information practices, and self-hosting a node whitethorn marque it adjacent easier for radical to subordinate your Ethereum accounts with your IP address."

View source