Is MetaMask safe? What its own terms say

YOUR PRIVATE KEY AND SECRET RECOVERY PHRASE MUST BE KEPT SECRET AT ALL TIMES, THAT METAMASK WILL NOT STORE A BACKUP OF, NOR WILL BE ABLE TO DISCOVER OR RECOVER, YOUR PRIVATE KEY OR SECRET RECOVERY PHRASE, THAT DIGITALLY COPYING AND STORING YOUR SECRET RECOVERY PHRASE ON A CLOUD STORAGE SYSTEM OR OTHER THIRD PARTY SUPPORTED DATA STORAGE, INCLUDING YOUR PERSONAL DEVICE, MAY INCREASE THE RISK OF LOSS OR THEFT

MetaMask operates non-custodial services, including staking, meaning we do not have access to the security key that permits you to access the funds you have staked and any rewards you have earned. We are not able to take custody of your rewards or assets.

You acknowledge that certain methods of securing your secret recovery phrase, such as storing it as a digital file anywhere, including on your personal device or on a cloud storage provider, increase the risk that your account or secret recovery phrase will be compromised. You further acknowledge that you will not share with us nor any other third party any password or secret recovery phrase that relates to your use of the Offerings, and that we will not be held responsible if you do share any such password or phrase, whether you do so knowingly or unknowingly. For the avoidance of doubt, we take no responsibility whatsoever for any theft of a secret recovery phrase that involved intrusion through any means into your personal device or a cloud provider’s data repository.

In certain Offerings, including MetaMask Swaps, Bridging, Staking, and Snaps, you may view, have access to, and may use the informational content, products, or services of one or more third parties (“Third Party Content” and “Third Party Services” respectively). In each such case, you agree that you view, access or use such content and services at your own election. Your reliance on any Third Party Content and use of Third Party Services in connection with the Offerings is governed on one hand by this Agreement but, on the other, will also generally be subject to separate terms and conditions set forth by the applicable third party content and/or service provider.

By enabling MEV Protection, you expressly authorize us to share your transaction data with a network of third-party ("Searchers”). You acknowledge and agree that: (A)Searchers are permitted to bid for the right to "backrun" your transaction (placing a transaction immediately following yours in a block); (B) This coordination is intended to prevent "toxic" MEV (such as frontrunning) while allowing "benign" MEV (such as backrunning/arbitrage); and (C) We do not control the specific strategies employed by third-party Searchers.

You may choose to stake your assets by delegating to a MetaMask-operated validator node or to a third-party validator node (both a “Designated Validator Node”). If you choose to stake your assets with a third-party validator node (including the “Lido Staked ETH” node or any other provider), then such staking is subject to the third party’s staking terms and conditions.

MetaMask may suspend or terminate this staking offering for any reason in its sole discretion and is under no obligation to disclose the details of its decision to take such action with you, but if MetaMask does so, MetaMask will not itself inhibit access to your staked tokens or to any rewards you have earned, but we take no responsibility for any third party service provider or any third party protocol. In certain offerings, such as MetaMask Validator Staking, MetaMask may be able to initiate the un-stake process to the wallet you staked with. Upon 90 days notice from MetaMask of termination of the offering or suspension of your access, you must initiate and complete the un-stake process. Upon expiration of that 90 day notice period, in its sole discretion, MetaMask may initiate the un-stake process on your behalf and your staked tokens and any rewards issued by the third party protocol to the wallet you staked with and will not be accessible by MetaMask.

do not collect financial payment or banking information unless this is required for the use of specific features. For example, when you use our on- or off-ramp features these Offerings may necessitate you submitting this information to third-party providers.

Please note that the use of data described above applies when you utilise MetaMask’s default settings and configurations. When you use these settings Infura is the default Remote Procedure Call (RPC) provider. In limited circumstances (for example, a service outage) we may use other RPC providers to provide the best experience for our users. You may disable or opt-out of these default settings or configurations at any time.

Wallet and transaction related information, including your wallet address which is processed as part of API requests (in URL parameters or bodies) when making API calls required to support the user experience. Please note that this applies where you utilise MetaMask’s default settings and configurations, which you may disable or opt-out of at any time.

Money Account allows you to deposit eligible Digital Assets into vaults that are deployed on blockchain protocols and that use third-party infrastructure and strategy services to allocate assets across selected DeFi protocols. MetaMask provides the interface through which you access Money Account.

We may suspend your right to access or use any portion or all of the Offerings immediately if we determine: (a) your use of the Offerings (i) poses a security risk to the Offerings or any third party, (ii) could adversely impact our systems, the Offerings, or the systems of any other user, (iii) could subject us, our affiliates, or any third party to liability, or (iv) could be unlawful; (b) you are, or any End User is, in breach of this Agreement;

We may also terminate this Agreement for cause immediately (A) if we have the right to suspend under Section 5, (B) if our relationship with a third-party partner who provides software or other technology we use to provide the Offerings expires, terminates, or requires us to change the way we provide the software or other technology as part of the Offerings, or (C) in order to avoid undue risk of violating the law.

We reserve the right to change, suspend, remove, disable, or impose access restrictions or limits on the use of any Third Party Service at any time without notice.

You understand and accept that the issuer of mUSD, and any third-party compliance, security, analytics, fraud-prevention, sanctions-screening, monitoring, or similar provider engaged by, acting on behalf of, or otherwise authorized to support the mUSD program, may monitor activity relating to mUSD and may be able to restrict, freeze, or otherwise impair or prevent the minting, redemption, or use of mUSD by particular wallet addresses, accounts, persons, smart contracts, protocols, or transactions.

YOU UNDERSTAND AND ACCEPT THAT ANY SUCH THIRD PARTY MAY RESTRICT, REJECT, DELAY, BLOCK, BLACKLIST, FREEZE, QUARANTINE, DISABLE, SEIZE, BURN, OR OTHERWISE IMPAIR YOUR ABILITY TO ACCESS, HOLD, TRANSFER, RECEIVE, REDEEM, SWAP, BRIDGE, SPEND, OR OTHERWISE USE mUSD.

Ethereum • Bitcoin • Linea • Base • Solana • Tron • Polygon • BNB Chain

IN NO EVENT SHALL THE AGGREGATE LIABILITY OF EACH PARTY TOGETHER WITH ALL OF ITS AFFILIATES ARISING OUT OF OR RELATED TO THIS AGREEMENT (REGARDLESS OF WHETHER SUCH LIABILITY ARISES FROM NEGLIGENCE OR OTHERWISE) EXCEED THE TOTAL AMOUNT PAID BY YOU HEREUNDER FOR THE OFFERINGS GIVING RISE TO THE LIABILITY IN THE TWELVE MONTHS PRECEDING THE FIRST INCIDENT OUT OF WHICH THE LIABILITY AROSE, OR, IF NO FEES HAVE BEEN PAID, $25,000.

We reserve the right, at our sole discretion, to modify or replace any part of this Agreement or any Policies at any time. It is your responsibility to check this Agreement periodically for changes, but we will also use commercially reasonable efforts to communicate any material changes to this Agreement through the Site, email (if you have an account), or public channels. You agree that your continued use of or access to the Offerings following the posting of any changes to this Agreement constitutes acceptance of those changes, whether or not you were checking for changes or actually read the changes.

Any dispute, claim or controversy (“Claim”) relating in any way to this Agreement, the Site, or your use of the Offerings will be resolved by binding arbitration as provided in this Section 11, rather than in court, except that you may assert claims in small claims court if your claims qualify.

You have the right to opt-out and not be bound by the arbitration and class action waiver provisions set forth above by sending written notice of your decision to opt-out to the email address [email protected] with subject line LEGAL OPT OUT. The notice must be sent within 30 days of your first use of the Offerings

you represent to us that you are (1) not subject to sanctions or otherwise designated on any list of prohibited or restricted parties, including but not limited to the lists maintained by the United Nations Security Council, the U.S. Government (i.e., the Specially Designated Nationals List and Foreign Sanctions Evaders List of the U.S. Department of Treasury and the Entity List of the U.S. Department of Commerce), the European Union or its Member States, the United Kingdom, or other applicable government authority and (2) not located in any country subject to a comprehensive sanctions program implemented by the United States.

Money Account is not available in any jurisdiction where it is restricted or unavailable, as identified by us from time to time.

where we are required to do so to comply with our legal obligations (e.g. to help us avoid providing offerings to regions prohibited by sanctions laws); and

Where you participate in additional analytics data collection (also known as MetaMetrics), we may associate user event information with your wallet address(es) and transaction hashes.

Notwithstanding anything to the contrary, we may use de-identified metadata, usage patterns, and aggregated performance data derived from your use of the Offerings (“Usage Data”) to improve our algorithms and Offerings to the extent permitted by data protection law. You agree that we own all right, title, and interest in and to any improvements or derivative works created using such Usage Data.