The firm sparked controversy last month after disclosing MetaMask’s data collection practices.
We heard you, went to work, and would like to share some important clarifications and updates https://t.co/5HGlWFuIEq
— MetaMask (@MetaMask) December 6, 2022
In today’s update, ConsenSys further elaborated that it does not store MetaMask wallet information when users make “read” requests through Infura, such as logging in to check their account balance. Instead, users’ IP and wallet addresses are only logged after “write” requests by making transactions through Infura’s RPC endpoints. ConsenSys also claims the two data types are not stored together to allow its systems to inference from them.
After community feedback, the firm said it would be building a new advanced settings page to give all new users the opportunity to choose their own RPC during onboarding and thereafter. Users have the option to opt-out of Infura and choose a third-party RPC. However, ConsenSys warned that:
“From a privacy perspective, we caution that these alternatives may not actually provide more privacy; alternate RPC providers have different privacy policies and data practices, and self-hosting a node may make it even easier for people to associate your Ethereum accounts with your IP address.”