The company has made it clear that it does, in fact, record users’ IP addresses and wallet details whenever they conduct a MetaMask transaction using Infura. However, it intends to keep this information for no more than seven days.
According to a statement released by the company on Tuesday, a policy update made in November did not signal a shift in ConsenSys’s business procedures but rather aimed to clarify them. After the update, users were alarmed to see that MetaMask and Infura were collecting sensitive information such as their wallet addresses and IP addresses.
“We are committed to protecting the privacy of people who use our products so that they will not—and, ultimately, cannot—be betrayed by yet another centralized entity,” ConsenSys states.
ConsenSys claims that it does not link wallet data with IP address data because the two sets of data are stored independently.
“We have never and will never sell any user data we collect,” it added.
Due to OFAC’s penalties in August, Infura restricted access to the Tornado Cash privacy protocol.
The firm also intends to enhance the user experience surrounding the current methods for changing one’s RPC node, such as by taking precautions to not over-caution the user away from doing so. To be fair, ConsenSys did provide a caution concerning the use of non-default RPC nodes, such as self-hosted nodes.
It warned that “alternate RPC providers have different privacy policies and data practices, and self-hosting a node may make it even easier for people to associate your Ethereum accounts with your IP address,”
MetaMask Stores IP Addresses Temporarily
MetaMask’s co-founder and chief architect Dan Finlay has previously said that the service does not use IP addresses. He said, however, that addresses are being stored temporarily even when they aren’t required to be.