MetaMask Privacy Policy

This document is MetaMask's privacy policy, governing the collection, use, and disclosure of personal data by Consensys Software Inc. in connection with MetaMask wallet software, browser extensions, and related services, relying on legal bases including consent, contractual necessity, and legitimate interests. The policy states that MetaMask collects network request data including IP addresses and wallet addresses when users interact with MetaMask's default RPC provider (Infura), also operated by Consensys, and that this data may be used for analytics, fraud prevention, legal compliance, and improving services; the policy further states that users can configure alternative RPC providers to avoid this collection. A notable operational feature is the vertical integration between MetaMask and Infura: because both are Consensys products, wallet interaction data and network infrastructure data may be combined within a single corporate family, which is operationally distinct from wallet providers using independent third-party RPC endpoints. The policy engages GDPR and UK GDPR for EEA and UK users, CCPA/CPRA for California residents, and references data subject rights including access, deletion, correction, and portability; Consensys states it does not sell personal data but reserves the right to share it with affiliates, service providers, and in corporate transaction contexts. Material compliance considerations include the adequacy of consent mechanisms for MetaMask's international user base, the classification of wallet addresses as personal data under GDPR, and the sufficiency of disclosures around Infura's role as a data processor or controller.