MetaMask can share your personal data with other Consensys-owned companies and with outside vendors that help run its services. These third parties are supposed to keep your data confidential, but the policy permits broad internal sharing across the Consensys corporate family.
This analysis describes what MetaMask's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Affiliate sharing means your data can move across multiple Consensys products and business lines without your specific consent for each transfer, potentially exposing your financial activity data to a wider set of internal systems and personnel than you might expect.
Interpretive note: The exact scope of affiliate entities and the specific data categories shared are not fully enumerated in the publicly available policy text, creating some uncertainty about the breadth of this provision in practice.
Personal data including wallet addresses and transaction metadata may be shared across all Consensys-affiliated entities, meaning data collected by MetaMask could inform activities at Infura, ConsenSys Mesh, and other group companies without additional notice.
How other platforms handle this
We share Personal Data with vendors, service providers, and agents who work on our behalf and provide us with services related to the purposes described in this Privacy Policy or our Terms of Service.
We will disclose personal information to companies that help us run our business to detect, prevent, or otherwise address fraud, deception, illegal activity, misuse of Adobe Services and Software, and security or technical issues.
We also require these service providers to protect your personal information to at least the same standards that we do.
"We may share your personal information with our affiliates, meaning entities that control, are controlled by, or are under common control with Consensys. We also share information with service providers who assist in operating our services, subject to confidentiality obligations.Excerpt from MetaMask's Privacy Policy
REGULATORY LANDSCAPE: Affiliate data sharing engages GDPR Article 6 lawful basis requirements; sharing within a corporate group does not automatically constitute a lawful basis under GDPR, and each transfer must be justified.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Affiliate sharing means your data can move across multiple Consensys products and business lines without your specific consent for each transfer, potentially exposing your financial activity data to a wider set of internal systems and personnel than you might expect.
Personal data including wallet addresses and transaction metadata may be shared across all Consensys-affiliated entities, meaning data collected by MetaMask could inform activities at Infura, ConsenSys Mesh, and other group companies without additional notice.
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by MetaMask.