ConsenSys will shorten MetaMask data retention to 7 days following privacy discourse
In a privateness replace published Dec. 6, ConsenSys, the developer of the favored MetaMask browser pockets, mentioned it will cut back its retention of consumer knowledge comparable to pockets addresses and IP addresses to seven days. Beforehand on Nov. 24, ConsenSys up to date its privateness coverage to make clear how Infura, or MetaMask’s default Distant Process Name (RPC), works with consumer knowledge comparable to together with IP addresses. The revelation sparked controversy within the crypto group relating to privateness considerations, main the agency to make clear that IP addresses collected by way of MetaMask is not going to be monetized or “exploited.”
We’re dedicated to defending the privateness of MetaMask customers. Final month, the ConsenSys privateness coverage replace raised questions and misconceptions.
We heard you, went to work, and wish to share some vital clarifications and updates https://t.co/5HGlWFuIEq
— MetaMask (@MetaMask) December 6, 2022
In as we speak’s replace, ConsenSys additional elaborated that it doesn’t retailer MetaMask pockets data when customers make “learn” requests by way of Infura, comparable to logging in to test their account steadiness. As an alternative, customers’ IP and pockets addresses are solely logged after “write” requests by making transactions by way of Infura’s RPC endpoints. ConsenSys additionally claims the 2 knowledge varieties should not saved collectively to permit its techniques to inference from them.
After group suggestions, the agency mentioned it will be constructing a brand new superior settings web page to present all new customers the chance to decide on their very own RPC throughout onboarding and thereafter. Customers have the choice to opt-out of Infura and select a third-party RPC. Nonetheless, ConsenSys warned that:
“From a privateness perspective, we warning that these options could not really present extra privateness; alternate RPC suppliers have totally different privateness insurance policies and knowledge practices, and self-hosting a node could make it even simpler for individuals to affiliate your Ethereum accounts along with your IP deal with.”