Privacy preserving features in MetaMask

MetaMask is committed to offering an exceptional, privacy preserving crypto wallet experience that keeps you safe and lets you configure settings based on your preferences.

As a MetaMask user, you know how much privacy matters. MetaMask is deeply committed to user consent and choice when it comes to personal information. We're continually evolving the wallet to give you clear control over how your data is used, while preserving your privacy and security. Here's an overview of the settings that put you in control.

You choose how your data is used

MetaMask gives you three independent choices: Basic Functionality, your RPC configuration, and product analytics. Together they let you tailor how the wallet works and how your data is used.

Basic Functionality

Basic Functionality is MetaMask's default configuration, a single setting that controls a group of connected features that help the wallet work smoothly and keep you safe. As with any app that connects to the internet, some of these features involve standard network requests. MetaMask uses this data only to provide the features, and never sells your data.

Features included are: token and NFT detection, transaction simulations, security alerts, phishing detection, ENS resolution in the address bar, proposed nicknames, smart contract decoding, network details checks, and batched account balance requests.

You can turn Basic Functionality off entirely, but you cannot disable individual features. Turning it off limits MetaMask to a more pared back wallet, without the features above and without the ability to enable backup and sync or notifications, if you choose to do so. Basic Functionality is available to current users who onboarded with a Secret Recovery Phrase, in Settings > Privacy or during new user onboarding via Manage Default Settings. If you signed up with Google, Apple, or Telegram, Basic Functionality is always enabled and can't be turned off.

Security features that Basic Functionality supports

Basic Functionality contains several security features including the below.

Transaction simulations estimate the likely outcome of a transaction before you confirm it, so you can catch anything unexpected.

Security alerts warn you when a transaction or site shows signals associated with scams, phishing, impersonation, or other harmful activity.

Phishing detection checks the sites you visit against lists of known and suspected phishing sites, and warns you before you connect.

Network details checks verify a network's details against a maintained list when you add it, helping you avoid connecting to a malicious or incorrect network.

Because these protections are built into Basic Functionality, they are no longer available when the setting is turned off.

RPC configuration

MetaMask communicates with blockchain networks such as Ethereum via standard Remote Procedure Call (RPC) APIs. We provide default RPC configurations for many networks so you can interact reliably. Because this requires your device to transmit data to and from RPC endpoints, you can change your RPC endpoints at any time, including using your own custom endpoints.

MetaMask analytics

Our analytics tools (also referred to as Metrics) help improve MetaMask by collecting non-sensitive, pseudonymous user events. Analytics is optional and independent from Basic Functionality. You can opt in or out at any time without affecting the features above.

Our privacy policy

We also aim to have one of the most comprehensive privacy policies in the industry. In updating our privacy notice, we've made it even clearer what we do, and don't do, with user information—we:

• Do not collect your Private Keys.

• Do not collect or retain Personal Information unless necessary to provide the Services and a great user experience.

• Do not sell your Personal Information.

• Do not collect payment or banking information unless this is required for the use of specific features.  For example, when you use MetaMask to Buy or Sell crypto or when you fund your MetaMask Card, these Offerings may necessitate you submitting this information to third-party providers.

For IP addresses in particular, we may temporarily process your IP address only where required for some Services (depending on your settings), for example to prevent DDoS attacks.

We’re committed to giving MetaMask users clear choice over how and with whom they share data. For more info, read MetaMask's full Privacy Notice.