Governance document

CA-D-000280

MetaMask Privacy Policy

MetaMask

Last change detected April 19, 2026 Privacy policy

SHA-256: 279eb0f8be6bb76bcc6… 1 version captured 0 changes documented

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

View original document at MetaMask ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

106 Total

42 High severity

52 Medium severity

12 Low severity

Key Facts

Will MetaMask notify users where it engages in automated decision making?

MetaMask will notify users where it engages in automated decision making.

When may MetaMask temporarily process a user's IP address?

MetaMask may temporarily process a user's IP address only where required for some of its Offerings, depending on the user's MetaMask settings.

Does MetaMask collect or retain Personal Information unless necessary to provide the Offerings?

MetaMask does not collect or retain Personal Information unless necessary to provide the Offerings and a great user experience.

When a user uses the Offerings on behalf of their organization, who owns the associated accounts?

MetaMask discloses that when a user uses the Offerings on behalf of their organization, the organization owns the associated accounts and may take certain actions in respect to the user's access or abilities to use the Offerings.

What may the organization do in respect to the user's access or abilities to use the Offerings?

Does MetaMask sell users' Personal Information?

MetaMask does not sell users' Personal Information.

Will MetaMask retain Personal Information unless a longer retention period is required or permitted by law?

MetaMask will retain Personal Information for the period necessary to fulfill the purposes outlined in the Privacy Notice, to make the Offerings available, or as instructed by the user, unless a longer retention period is required or permitted by law.

Where will Personal Information about users be stored when they use the Offerings?

MetaMask discloses that Personal Information about users will be stored in the United States when they use the Offerings.

In what event does MetaMask reserve the right to transfer all of a user's Personal Information to another entity?

MetaMask reserves the right to transfer all of a user's Personal Information to another entity in the event of a change in ownership, merger, acquisition, or transfer or sale of all or a portion of its assets.

Does MetaMask collect users' private keys?

MetaMask does not collect users' private keys.

Stay ahead of the changes

Track MetaMask and get the diff the day its terms change.

Monitor MetaMask + up to 20 platforms — $4.99/mo →

Summary

This document explains what data MetaMask collects about you and how it handles it. MetaMask does not collect your private keys or sell your Personal Information, and limits data collection to what is needed to run its services. If you use MetaMask on behalf of an organization, that organization — not you — owns the associated accounts and controls your access.

Analysis

MetaMask's Privacy Policy establishes the scope and limits of Personal Information collection, use, retention, and sharing for users of its Offerings. MetaMask commits to data minimization, collecting and retaining Personal Information only as necessary to provide the Offerings and a good user experience, and explicitly does not collect private keys or sell Personal Information. IP address processing is limited to temporary handling where required for specific Offerings and conditioned on user settings. The policy discloses U.S.-based storage of Personal Information, permits full transfer of Personal Information in corporate transactions, and conditions retention periods on necessity, user instruction, and applicable law. MetaMask also establishes an affirmative obligation to notify users when automated decision-making is employed, and discloses that customer support agents may use AI tooling to process user queries.

What this means for you

MetaMask does not collect your private keys or sell your Personal Information, and only processes your IP address temporarily where specific services require it. Your Personal Information is stored in the United States and may be transferred to another company in the event of a merger or asset sale, with no stated ability for you to prevent that transfer. If you opt into MetaMetrics analytics, MetaMask may link your activity data to your wallet address and transaction hashes — you can manage this through your MetaMask settings.

Institutional Analysis

Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Monitor MetaMask + up to 20 platforms — $4.99/mo → Get the research letter, free

Featured, High severity

Automated Decision-Making Notification Obligation Compare →

This establishes an affirmative obligation on MetaMask to inform users when automated processes make decisions about them, rather than leaving users unaware.

Added July 10, 2026 Standard Seen across 217 platforms
IP Address Temporary Processing Only Compare →

IP address processing is explicitly limited to temporary processing and only where required for specific Offerings, conditioning the scope of IP data handling on both necessity and user settings.

Added July 10, 2026 Standard Seen across 296 platforms
Minimal Personal Information Retention Policy Compare →

This clause limits MetaMask's collection and retention of Personal Information to what is necessary for defined purposes, establishing a data minimization commitment.

Added July 10, 2026 Standard Seen across 275 platforms
Organization Ownership of Employee Accounts Compare →

Individual users acting on behalf of an organization do not own the accounts they use; ownership and control rests with the organization, which may alter or restrict the user's access.

Added July 10, 2026 Standard Seen across 265 platforms
Personal Information Not Sold Compare →

This is an explicit commitment against the commercial sale of Personal Information, which is a key data rights protection for users.

Added July 10, 2026 Standard Seen across 288 platforms
Personal Information Retention Period Policy Compare →

The retention period is bounded by necessity and user instruction but contains a broad carve-out allowing longer retention whenever law requires or permits it, which may extend retention beyond the user's expectation.

Added July 10, 2026 Standard Seen across 275 platforms
Personal Information Stored in United States Compare →

Storage of Personal Information in the United States subjects it to U.S. law and may affect the privacy rights and protections available to users located in other jurisdictions.

Added July 10, 2026 Standard Seen across 267 platforms
Personal Information Transfer on Change of Ownership Compare →

All of a user's Personal Information may be transferred to a new entity upon a corporate transaction, and the user has no stated ability to prevent this transfer.

Added July 10, 2026 Standard Seen across 297 platforms
Private Keys Never Collected Compare →

Private keys control access to cryptocurrency wallets; an explicit commitment not to collect them is a foundational security and custody assurance for users.

Added July 10, 2026 Standard Seen across 296 platforms
Sanctioned Territory Access Prevention Compare →

Users who are located in sanctioned territories or are themselves sanctioned individuals may be blocked from accessing MetaMask's Offerings.

Added July 10, 2026 Standard Seen across 183 platforms

Featured, Medium severity

AI Tooling Used in Customer Support Compare →

Users interacting with customer support may not be communicating solely with human agents; AI tooling may process and act on the content of their queries.

Added July 10, 2026 Standard Seen across 217 platforms
MetaMetrics Analytics Wallet Association Compare →

Participation in MetaMetrics analytics allows MetaMask to connect behavioral event data to identifiable on-chain identifiers, increasing the specificity of data associated with a user.

Added July 10, 2026 Standard Seen across 279 platforms