MetaMask User Data Collected by Infura Only Stored for 7 Days, Says ConsenSys

ConsenSys released a statement to make clarifications, updates, and commitments regarding its previously updated Privacy Policy. The company said the retention of MetaMask user data will be narrowed to 7 days.

Last month, ConsenSys updated its Privacy Policy. Under the new policy, when users use Infura as the default RPC provider in MetaMask, Infura will collect the users' IP addresses and Ethereum wallet addresses when sending a transaction.

In the statement, ConsenSys said it doesn't store wallet account address information when a MetaMask user makes a "read" request through Infura. Therefore, it can never associate wallet account addresses to an IP address based on this type of user activity; it collects wallet and IP address information in connection with "write" requests, also known as transactions, when MetaMask users broadcast transactions through Infura's RPC endpoints.

In addition, IP addresses and wallet address data relating to a transaction are not stored together or in a way that allows ConsenSys systems to associate those two pieces of data. ConsenSys is working on narrowing retention of user data to 7 days, and promises that it has never and will never sell any user data it collects.

Besides, ConsenSys will launch a new advanced settings page on MetaMask, allowing new users to choose their own RPC providers at on-boarding and to opt out of third-party services.