Phantom Wallet announced that it had conducted an audit on its handling of user IP addresses on December 2 in response to recent privacy concerns from the community. The audit results showed that neither Phantom Wallet nor its RPC partners can identify users.
Phantom says it has always used a privacy proxy to remove IP addresses from RPC requests. Its RPC partners have never been able to identify users, and Phantom's roadmap will include adding the ability to use custom RPCs.
Additionally, Phantom cannot identify specific users or tie IP addresses to wallet addresses. Phantom has always had completely anonymous customer tracking, and users can opt out. The section of Phantom's current privacy policy that mentions IP addresses is primarily to explain how it uses site analytics to track behavior on the Phantom website. Phantom says it is quickly updating its privacy policy to clearly distinguish between its website and wallet.