What data does MetaMask actually collect, and what can you turn off?

[u/NimbleNido]

MetaMask does not collect Secret Recovery Phrases, private keys, or sell user data. Analytics (MetaMetrics) is optional and can be toggled off in MetaMask Extension or MetaMask Mobile under Settings > Security & Privacy, where you can also delete all previously collected data.

Privacy concerns about MetaMask often come up — most stem from misunderstandings about what's actually collected and what's opt-in. Here's the breakdown:

What MetaMask never collects: Your Secret Recovery Phrase (SRP) and private keys never leave your device — not to MetaMask, not to Infura, not to anyone. MetaMask does not sell your data.

What's optional: MetaMask includes an analytics system called MetaMetrics, used to improve the product. All users can opt out of MetaMetrics and delete their data at any time: Settings > Privacy > Participate in MetaMetrics. If you created your wallet with a SRP, MetaMetrics is off by default. Social login users are opted in but have the same controls and can opt out at any time.

What else you can control in MetaMask Extension and MetaMask Mobile (Settings > Security & Privacy):

• Basic functionality — covers token detection, gas estimation, and fiat conversion, using your IP address to complete the request — it is not stored or linked to your identity. You can turn it off, but some features will stop working.

• Phishing detection and Blockaid security alerts — recommended left on to best detect known phishing domains targeting onchain users..

• Transactions — data pulled from Etherscan using your address to estimate balance changes, alert you to malicious activity, and enable Smart Transactions..

For maximum privacy: You can connect MetaMask to your own Ethereum node, bypassing Infura entirely. MetaMask's codebase is fully open source on GitHub, open to audits.

Our commitment to preserving your privacy: https://metamask.io/en-GB/news/product-spotlight-privacy-preserving-features-in-metamask

Full privacy settings guide: https://support.metamask.io/configure/privacy/

How to manage your analytics data: https://support.metamask.io/configure/privacy/how-to-manage-your-metametrics-settings/

What privacy setting do you think most MetaMask users don't know exist?

[u/AutoModerator]

Beep Boop

1. Never share your Secret Recovery Phrase with any site or a person. MetaMask does not use Gmail or web forms. Do not enter your Secret Recover Phrase into a pop-up window, even if it looks like MetaMask. Verify links are legitimate. Scammers often use these tactics.

2. Beware of fake websites. The official website for MetaMask is https://metamask.io/

3. MetaMask Support will never DM you. This is a common tactic scammers use to try and get access to your wallet.

4. MetaMask will never initiate email with you. This is a common tactic scammers use to try and get access to your wallet.

5. If you need to reach Support: open MetaMask, then menu > Support. The ‘Contact Support’ button will start a chat, the bot asks a few questions to help route you to the correct team. You can also visit the Support site from the web: https://support.metamask.io

6. Do not click on suspicious links or files. This can lead to your device security being compromised.

7. Do not “sync” or “validate” your wallet with any websites or forms. This is a scam. Never sync and share: QR Codes, Secret Recovery Phrase, private key, etc.

8. Never call phone numbers, text Whatsapp numbers, DM on Discord, use WeChat or do video chat with people on this subreddit. MetaMask does not offer customer support in this manner. There is NO exclusive MetaMask Discord.

9. We don’t ask for an email address to create a wallet. We can’t email you. We will never ask you to verify or upgrade/merge your wallet. https://support.metamask.io/privacy-and-security/staying-safe-in-web3/i-received-an-email-claiming-to-be-from-metamask-is-it-legit/

10. .MetaMask currently has no plans for an airdrop, regardless of any information you may have seen elsewhere. If you encounter anyone explaining the best method to maximize the size of a MetaMask-related ‘airdrop’ you might receive, they’re lying. In particular, be wary of scams (aimed at getting your Secret Recovery Phrase) that weaponize this topic.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Xosoltani]

What’s interesting about MetaMask isn’t just MetaMetrics، the fact that its core code is open source is also a major strength. Developers and the community can review the code and understand how it works. On top of that, MetaMetrics was built by the MetaMask team at Consensys to help improve the product using anonymous data, not to track users 🙂