metamask.io privacy report

Privacy audit of metamask.io. Grade E (32/100). 25 tracker requests from 6 owners across 1 jurisdiction. See the full breakdown and how to ask for deletion.

Last audited today Re-audit

E
32 / 100
Poor
Privacy
0/100
Data flow
40/100
Security
81/100
Practices
37/100

Trackers detected on metamask.io

We found 25 tracker requests across 11 hostnames, controlled by 6 distinct companies.

OwnerCountryCategoryRequests
Google US Advertising 13
LinkedIn (Microsoft) US Advertising 8
YouTube (Google) US Third-party embed 2
Reddit US Advertising 1
X / Twitter US Advertising 1

Where metamask.io sends your data

Tracker hosts on this site are controlled from these jurisdictions:

  • United States CLOUD Act Schrems II risk: high 25 requests

Learn more: the US CLOUD Act, Schrems II, the Digital Markets Act.

What this means for you

Security headers

HTTPS enforced: yes. Security headers score: 83/100.

No major issues detected in HTTP security headers.

Take action

Delete your metamask.io account

Generate a GDPR Article 17 erasure letter pre-filled for metamask.io.

Run a fresh audit

Re-run the live tracker scan on metamask.io right now.

Audit your own site

Paste any URL and get the same report card in 10 seconds.

Recently audited sites

This report was generated by the Dazr website privacy check. The audit fetches the public home page of metamask.io, identifies tracker requests, classifies their owners and jurisdictions, and grades the result. Reports refresh when re-run via the live tool.

Audited 6 October 2026. Last cached 6 October 2026.