Hello guys, so:
on PC i run the Trezor Suite under TOR, so all the address and transactions should not be tied directly to me (yes as long as I don’t purchase crypto using my identity); however, if i use the mobile App without a VPN or without TOR, is there a chance that the address of my wallets will leak my real IP (no vpn on phone) or any other information about me? Thanks!
Hi @Sticky,
you leave traces on backend servers by asking about your address. You even asks for bunch of addresses, so the server in theory can conlude, that these all addresses belongs to you. Now if you use TOR you fake your source IP address, but you are probably asking about same pattern of your addresses making tracing you easier Sameway if you are using various blockchain explorer, you are probably watching your own addresses, right?
One of the way could be running and using your own full node, i.e. paranoia vs cost
I understand your concern but the mobile app works using xpub, i was wondering if connecting my xpub on mobile could actually leak my ip even if on the pc suite i use tor
Hi @Sticky,
you are talking about the application - are you referring to Trezor Suite Lite for android?
Could you closer specify your leak concerns - i.e. by leak to where and whom? (You mean application authors? Companies running servers you/application is asking based on your XPUB?)
For connectivity - you always need source and destination IP address. So the backend always knows your IP as it needs to deliver you reply (amount of BTC on your BTC address to your application’s IP address). The point is, if the IP have some relation to you. In case of mobile - if authority would ask phone operator about the IP, they will tell them and point to your SIM. VPN/TOR can hide the relation between you and the source IP address.
How the title say im referring to the IOS lite app, which is view only and works trough public key, by connecting my public key to my phone app, will i expose my mobile ip? To who? I don’t know, will it just expose it?
Hi @Sticky,
for some time i thought you are referring to some generic mobile wallet, sorry about that.
Servers will know and see source IP, as you send a request to those servers asking about balance of your BTC addresses derived from your XPUB, but that does not mean, IPs are actively gathered and processed further. At least in EU: IP address is considered as identification number i.e. personal data which is covered by GDPR (You=Data subject; Trezor = Controller). Now, when it is clear (even to me now ) that you are using Trezor Suite Lite on iOS you can find Trezor Privacy policy to have a complete picture (on first screen after the installation or anytime in application’s menu if you want to re-read them anytime later).
Trezor respect the laws, your privacy, freedom & “…personal data are as anonymous as possible…” + IP address processing simply (to my understanding) can’t apply mentioned GDPR article 6 point 1f: …processing is necessary for the purposes of the legitimate interests pursued by the controller…
and sure neither mentioned GDPR article 6 point 1a: the data subject has given consent to the processing of his or her personal data for one or more specific purposes
So at least I feel safe now.
Note: Even in Trezor Privacy policy you will find a paragraph about legal authorities.