MetaMask privacy concerns, ConsenSys responds to the backlash

On Dec. 5, CryptoSlate ran an article on privacy concerns related to the use of MetaMask wallet, specifically how a recent public disclosure revealed the logging of user IP addresses.

In response to the backlash, MetaMask’s parent company ConsenSys released a statement addressing the concerns raised.

Crypto community uneasy over data collection policy

An updated privacy policy, released on Nov. 24, revealed the tracking of users’ IP addresses upon sending transactions, which applies to users who leave the default Remote Procedure Call (RPC) setting as Infura.

This sparked a wave of criticism from the crypto community, with some expressing unease over the data collection policy. Strategies shared to circumvent the tracking of IP addresses included changing the RPC setting to another provider and running an Ethereum node.

ConsenSys pointed out that the updated privacy policy was actioned to bring greater transparency to its operations. But logging IP addresses upon sending transactions was always carried out in the ordinary course of MetaMask use.

“These updates aimed to solely provide greater transparency on existing practices and did not describe a change in our business practices.”

Nonetheless, the company said the community feedback had prompted them to “better prioritize the privacy of MetaMask and Infura users.” For that reason, ConsenSys wanted to clarify misunderstandings and provide details on what it is doing to address privacy concerns.

ConsenSys said it supports user agency

Having read the Terms of Service, the founder of Boxmining, Michael Gu, speculated that MetaMask may log IP addresses when opening the wallet, not just when sending transactions.

ConsenSys’s statement clarified “read” requests, such as opening the wallet to check balances, do not log IP addresses. But “write” requests, when actioning transactions and via Infura endpoint service, do collect an IP address to ensure “successful transaction propagation, execution, and…