Phantom Claims Neither Its RPC Partners Nor Itself Can Identify Users

Phantom wallet announced it has completed an audit of its practices regarding IP addresses on December 2nd, in response to recent privacy concerns from the community. The result showed that neither Phantom itself nor its RPC partners could identify users.

Phantom said it has always used a privacy proxy to remove IP addresses from its RPC requests. The RPC partners have never been able to identify users and its upcoming roadmap includes adding the ability to use custom RPCs.

In addition, Phantom has no ability to identify specific users or tie IP addresses to wallet addresses. Phantom has always had completely anonymized client tracking that users can opt-out of. The current privacy policy mentions IP addresses primarily to address how Phantom uses site analytics to track behavior on its website. Phantom said it's moving quickly to update the privacy policy to clearly distinguish between its website and wallet.