MetaMask says it does not sell your personal data, which is a specific legal term under CCPA and similar laws meaning it does not exchange data for money. However, it does share data with partners and service providers.
This analysis describes what MetaMask's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
While the no-sale commitment addresses one category of concern, the policy still permits broad sharing with affiliates and service providers, meaning data can flow to third parties through channels other than a formal sale.
Interpretive note: The boundary between data sharing and data selling under CPRA's expanded definition of sharing depends on the nature of specific partner arrangements that are not fully disclosed in the policy.
MetaMask's policy asserts it does not sell personal data, which is a meaningful CCPA-specific protection; however, data sharing with Consensys affiliates, service providers, and potentially analytics partners may still result in your data being used by parties beyond Consensys, even without a direct monetary exchange.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"We do not sell your personal information to third parties. We may share personal information with third-party service providers and partners as described in this policy, but this sharing does not constitute a sale under applicable law.Excerpt from MetaMask's Privacy Policy
REGULATORY LANDSCAPE: The no-sale assertion directly addresses CCPA Section 1798.100 and the CPRA's expanded definitions, which include selling or sharing for cross-context behavioral advertising.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
While the no-sale commitment addresses one category of concern, the policy still permits broad sharing with affiliates and service providers, meaning data can flow to third parties through channels other than a formal sale.
MetaMask's policy asserts it does not sell personal data, which is a meaningful CCPA-specific protection; however, data sharing with Consensys affiliates, service providers, and potentially analytics partners may still result in your data being used by parties beyond Consensys, even without a direct monetary exchange.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by MetaMask.