MetaMask developer ConsenSys updated its privacy policy on Nov. 24 to start tracking MetaMask users’ IP addresses and Ethereum addresses when they send a transaction.
The update applies to users who use Infura as their Remote Procedure Call (RPC) provider in MetaMask. Infura is an affiliate of ConsenSys and is set as the default RPC provider in all MetaMask wallets.
The update also informs that if users change their RPCs from Infura to another provider, their data won’t be collected by ConsenSys. Still, they will be subject to whatever information collection policy is performed by the RPC provider of their choice. The updated ConsenSys privacy policy states:
“When you use Infura as your default RPC provider in MetaMask, Infura will collect your IP address and your Ethereum wallet address when you send a transaction.
However, if you’re using your own Ethereum node or a third party RPC provider with MetaMask, then neither Infura nor MetaMask will collect your IP address or Ethereum wallet address”
Other options
Crypto sleuth @CryptoSnooper_ shared the news on his Twitter account and said users could either switch to another wallet or change their RPC providers to dodge the update.
CryptoSnooper suggested Trust Wallet (TWT) or Rainbow as alternative wallet providers who don’t currently collect any user data.
Users can choose to change their RPC providers from Infura to another provider as a second option. CryptoSnooper recommended Alchemy and shared a tutorial describing how to change RPC endpoints.
Following Uniswap
ConsenSys’ decision to collect user data came three days after the decentralized exchange Uniswap revealed it started collecting its users’ on-chain data.
The exchange pointed to its desire “to make data-driven decisions that improve user experience.” as the main reason behind this decision.