Last Updated:
Consensys Software Inc. is the leading blockchain and web3 software company which provides offerings to users, creators and developers under the Consensys brand or brands owned by us. These include MetaMask, Infura and others.
Consensys Software Inc. (“Consensys,” “we,” “us,” or “our”) knows your personal information is important. As a result, we process your personal information responsibly and in accordance with applicable laws and regulations.
We appreciate the trust you place in us when you use our products and offerings, and when you visit our websites, including https://consensys.io/, https://metamask.io/ and others (“Sites”). This Privacy Notice (“Privacy Notice”) applies to the Sites (including subdomains), applications, products and offerings (collectively, “Offerings”) on or in which it is posted, linked, or referenced.
This Privacy Notice (and any supplemental privacy notices incorporated into this Privacy Notice) describes how we process the personal information collected when you access the Offerings. When you leave the Offerings, this Privacy Notice no longer applies. Any subsequent website, application, or service you access is subject to its own terms of service and privacy notice (if any) and not this Privacy Notice.
This Privacy Notice tells you about your rights and choices with respect to your personal information, including how you can contact us if you have any questions or concerns. In this Privacy Notice “Personal Information” means any information relating to an identified or identifiable natural living individual.
Please read this Privacy Notice carefully. If you do not agree with this Privacy Notice or any part thereof, you should not access or use any part of the Offerings. If you change your mind in the future, you must stop using the Offerings. You may exercise your rights in relation to your Personal Information as set out in this Privacy Notice and you may contact us at any time regarding those rights using the methods described in the “Contact Us” section below.
MetaMask privacy TL;DR
MetaMask users - what does this mean for you?
We take great care to protect the safety, security and privacy of MetaMask users, and to give users the ability to control and configure their wallet to meet their personal needs. We provide a detailed overview of the settings that we allow users to configure based on their individual experience and privacy preferences. This overview can be found at our MetaMask News site (here).
We have updated our Privacy Notice to continue providing transparency on our processing activities. In summary, for MetaMask users this means that we:
- do not collect your private keys.
- do not sell your Personal Information.
- do not collect or retain Personal Information unless necessary to provide you the Offerings and a great user experience (see below for details).
- for IP addresses in particular, we may temporarily process your IP address only where required for some of our Offerings (depending on your MetaMask settings) to provide the best possible experience for MetaMask users. This includes, for example, the prevention of DDoS attacks (see below for more details).
- do not collect financial payment or banking information unless this is required for the use of specific features. For example, when you use our on- or off-ramp features these Offerings may necessitate you submitting this information to third-party providers.
We may temporarily process IP addresses, only where necessary and to provide the best possible experience for MetaMask users. This includes the following purposes:
- for the basic functionality of our Offerings where you make requests from your device in relation to the Offerings. This is a necessary feature of providing our Offerings on the internet;
- to run third-party requests through proxy infrastructure, thereby eliminating your individual device details and IP address from the request that is ultimately received by third-parties. For example, instead of MetaMask sending traffic directly from your device to multiple third-party services, we may run the request through a proxy to improve performance and/or privacy for you;
- for providing you with the best experience when using the Offerings (e.g. to measure latency, volume of requests per region and to route your requests to servers close to your region to improve your experience of the Offerings) or where interactions with Third Party Platforms are required (depending on your MetaMask settings);
- where we are required to do so to comply with our legal obligations (e.g. to help us avoid providing offerings to regions prohibited by sanctions laws); and
- to ensure the safety, security and integrity of the Offerings (e.g. for the prevention of DDoS attacks).
If users wish to further limit the collection of their device and usage information, users could consider the use of virtual private networks, or ‘VPNs’.
We do not collect other Personal Information that we do not need. Personal Information that we may process is set out below at Section 2 (including information that you may provide to us and information that is collected automatically). For MetaMask users, this includes:
- Wallet and transaction related information, including your wallet address which is processed as part of API requests (in URL parameters or bodies) when making API calls required to support the user experience. Please note that this applies where you utilise MetaMask’s default settings and configurations, which you may disable or opt-out of at any time.
- Your MetaMask preferences and settings, only as necessary to provide the product. Generally this information is stored locally on your device. To the extent that we process this information to facilitate cross-device functionality, it is encrypted such that it can only be decrypted by you on your device(s).
- Feedback and survey responses, where you choose to provide this information.
- User event information. Where you participate in additional analytics data collection (also known as MetaMetrics), we use this data to support continued improvement of the product experience. We store this data pseudonymously. We do not link it to other Personal Information unless you ask us to do so or without informing you. You may disable this feature at any time. For further information about our processing of data for analytics and how to manage relevant settings, please see our relevant support article (here).
- Marketing related information, where you opt-in to share this information (like information from cookies). This helps us to learn how you interact with our marketing communications and personalize what we share with you, such as latest developments and product features. You may disable this feature at any time.
- Device related information, where you opt-in to receive notifications from your MetaMask wallet. For example, if you opt-in and ask us to provide push notifications to your mobile device, we will retain your device identifier to facilitate such notifications for as long as you remain opted-in. You may disable this feature at any time.
Please note that the use of data described above applies when you utilise MetaMask’s default settings and configurations. When you use these settings Infura is the default Remote Procedure Call (RPC) provider. In limited circumstances (for example, a service outage) we may use other RPC providers to provide the best experience for our users. You may disable or opt-out of these default settings or configurations at any time.
Occasionally, there may be limited options for the configuration of specific features, for example newly released features. If this is the case, we will inform you. See a detailed overview of the settings that we allow users to configure based on their individual experience and privacy preferences at our MetaMask News site (here).
Our relationship with you is described in this section. Consensys is the entity that provides the Offerings and determines the purpose and the means of processing for your Personal Information.
You are subject to the Terms of Use of the Offerings. This means that Consensys is the entity that provides the Offerings and determines the purpose and the means of processing for your Personal Information, or other similar designation under law.
The Offerings can be used by organizations or by individual Users. If you’re using the Offerings on behalf of your organization, your organization owns the associated accounts and may take certain actions in respect to your access or abilities to use the Offerings.
We collect Personal Information about you as described in this section. In summary, some information you provide to us. We also collect certain information automatically. All information we collect is subject to the use limitations described in section 3.
For example, when you use the Offerings we must collect certain data for the Offerings to work. This may include information like your email address which we may require for setting up an account for certain Offerings or your IP address (which we have to collect automatically for certain functionality).
Please note that you may choose to share an email address with us when using MetaMask (for example, when using specific features like single sign-on or when you sign-up to receive our email marketing communications). However, these features are optional and no email address is required to create or use a wallet with MetaMask.
When you visit the Offerings, we collect: (1) technical information that is used to deliver the contents and Offerings and for other purposes as described below, and (2) information that you provide to us.
We collect a variety of information that you provide to us. The specific types of information we collect will depend upon your engagement with the Offerings. Some Personal Information that you provide to us is required for the use of the Offerings. However other Personal Information is optional.
Account and Profile Information.
Certain Offerings require you to create an account or profile. If you create an account or profile to use the Offerings, we collect Personal Information to allow you to use these Offerings. When you sign up, you may provide us with your name, password, email address, mobile phone number, account history, or other information necessary to create and maintain your account or profile.
Contact Information and Other Information You Choose to Provide to Us.
You can provide a variety of information during your interactions with us, such as through emails or other communications. When you contact us via a website contact form, email, or other means, you provide us with Personal Information, such as your name and contact details, and the content of your communications with us.
Support Information.
When you request technical support services, we will process your Personal Information such as your name and the contact details you use to contact us, as well as information regarding the reasons for your support request, the support that was provided, and any additional information you may provide in that context. We may also process Personal Information about how you engage with our Offerings so that we can improve the support services that we provide to users.
Financial Information.
If you purchase our Offerings, you will need to provide payment information. We will use that information solely for the purpose of fulfilling your purchase request.
Other Information.
You may provide us with additional information associated with your use of the Offerings, such as your wallet address and transaction related information. If you decide to use the Offerings, we may collect and store the content and information you create or upload to the Offerings. Where relevant, this includes information relating to your preferences and settings when using the Offerings.
This also includes additional information you may choose to provide to us, such as feedback and survey responses.
For certain Offerings we may require you to provide additional Personal Information in order to verify your identity or to provide the Offering. We will inform you if this is the case.
We may automatically collect certain information due to your use of the Offerings. We use this information to enable the basic functionality of the Offerings. We strive where possible to ensure that the collected information is de-identified, aggregated and/or anonymized.
Single Sign-On Through Internet Service Providers.
When you decide to use single sign-in servers to connect to our Offerings, we may collect Personal Information from internet service providers. Your interactions with these tools are governed by the privacy notices of the corresponding platform.
Device and Usage Information.
When you access and use the Offerings, including in limited circumstances when you engage with our relevant support platforms to make a request or where you require support from us, we may receive and store information about your interactions. This may include information such as date/time stamps, usage information and statistics, your internet protocol (IP) address, location (eg, city or state), hardware and software information (including operating system version and type), browser type, device identifiers, device event information, crash data, cookie data, and your interactions with the Offerings. This information could be used to identify you or your device.
Cookies and Similar Technologies.
When you access the Offerings, we may collect Personal Information via cookies, pixel tags, or similar technologies on the Offerings (collectively referred to as “Cookies”). For more information on our use of Cookies, please read our Cookie Notice here.
Location Information.
When you use the Offerings, we may collect general location information (such as general location inferred from an IP address).
Information from Other Sources.
We may collect information about you from third parties, such as marketing partners (for example, when you engage with our marketing campaigns) and researchers (for example, when you engage with our user experience research activities). We may combine this information with information we collect from you and use it as described in this Privacy Notice.
Our use of your Personal Information is described below. In summary, we only use your information for the purposes for which it is collected.
We use the Personal Information we receive or collect for the following purposes:
PLEASE NOTE: We may use AI enhanced tooling and systems in the course of our day-to-day business. For example, when you engage with our customer support team, our support agents may use AI tooling to summarize content and to respond to your queries as efficiently as possible. Consensys always uses AI tools and systems in a responsible and ethical way.
In order to provide the Offerings, we must share your Personal Information in certain cases. This includes sharing your Personal Information within the Consensys Group, with our Service Providers and the other third parties listed in this section. We do not sell your Personal Information.
We may disclose Personal Information about you under the following circumstances:
Group Entities.
We may disclose Personal Information about you to our Consensys affiliates and subsidiaries, if any, for the purpose of providing the Offerings and conducting business.
Service Providers.
We work with third parties for the purpose of providing the Offerings such as hosting, maintenance, network management, cybersecurity, feature rollouts and testing, product analytics and support. These third parties may have access to or process your Personal Information as part of providing those services to us. For example:
Native Integrations.
You can use native integrations to share data with other applications. Consensys does not share data from integrated apps with any other services or clients.
Legal.
Personal information about you may be disclosed to law enforcement agencies, regulatory bodies, public authorities or pursuant to the exercise of legal proceedings if we are legally required to do so, or if we believe, in good faith, that such disclosure is necessary to comply with a legal obligation or request, to enforce our terms and conditions, to prevent or resolve security or technical issues, or to protect the rights, property or safety of Consensys, our Users, a third party, or the public.
Strategic Business Partners.
Where you have provided your consent, we may share your Personal Information with our strategic business partners in limited circumstances, for example for marketing and advertising purposes.
Third Party Platforms (as defined below).
Your Personal Information may be disclosed to Third Party Platforms where you have requested to interact with a third-party service or platform. Please see Third Party Links and Websites (Section 10) for more information.
We engage Service Providers for the purposes described above in Section 4. These Services Providers include the unaffiliated entities listed here.
Your rights associated with the Offerings are described below. Please note these rights may only be available to you in specific regions, countries or states based on where you reside. In certain cases, we may be prevented from allowing you to exercise these rights but we will inform you if that is the case when you seek to exercise the rights.
You have the following rights associated with the processing of your Personal Information:
Right to Access or Right to Know.
You have the right to obtain access to the Personal Information we hold about you and to request certain information about our processing. You have the right to receive an explanation of (i) why we process your Personal Information, (ii) the categories of Personal Information we have about you, (iii) who we share your Personal Information with, (iv) how long we store your Personal Information and (v) who we received your Personal Information from if it was not collected from you directly. We will also inform you about your privacy rights. We will notify you where we engage in automated decision making.
Right to Rectification or Correction.
You have the right to correct, update or complete any Personal Information we hold about you that is inaccurate or incomplete. Please note that we may rectify or remove incomplete or inaccurate information, at any time and at our own discretion.
Right to Erasure or Deletion.
You may request to have your Personal Information anonymized, erased, or deleted, as appropriate. In this case, if there is no overriding legitimate interest or requirement to continue processing your Personal Information, we will erase your data.
Right to Object to Processing.
You have the right to object to our processing of your Personal Information where we are relying on a legitimate interest or if we are processing your Personal Information for direct marketing purposes.
Right to Restrict Processing.
You have a right in certain circumstances to stop us processing your Personal Information other than for storage purposes.
Right to Portability.
You have the right to receive, in a structured, commonly used, and machine-readable format, Personal Information that we hold about you, if we process it based on our contract with you, or with your consent, or to request that we transfer such Personal Information to a third party.
Right to Withdraw Consent.
You may withdraw any consent you previously provided to us regarding the processing of your Personal Information at any time and free of charge. We will apply your preferences going forward. This will not affect the lawfulness of the processing before you withdraw your consent.
Right to Lodge a Complaint.
You may lodge a complaint with a supervisory authority, including in your country of residence, place of work, or where you believe an incident took place.
Right Against Discrimination.
We will not discriminate against you for exercising your rights.
Right to Opt Out of Targeted Advertising, Sale or Sharing.
You can ask us to stop using your Personal Information for targeted advertising when required by law.
You may exercise these rights by contacting us as set out in the “Contact Us” section below.
Please note that, prior to any response to the exercise of such rights, we may require you to verify your identity. In addition, we may have valid legal reasons to refuse your request and will inform you if that is the case. Note that applicable laws contain certain exceptions and limitations to each of these rights. Subject to certain restrictions, you can ask an agent to exercise your rights for you. If you have an agent exercising your rights, that person must provide to us your written authorization allowing them to make such a request on your behalf. We reserve the right to deny the agent’s request if we are not reasonably able to confirm proper authorization and/or verify your identity as the requestor.
To appeal any refusal by us to act on a data subject rights request contact us by email at: [email protected].
We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice, to make the Offerings available to you, or as instructed by you, unless a longer retention period is required or permitted by law. We may also keep your data for as long as it is needed in relation to a legal claim, complaint, litigation or regulatory proceedings.
We implement a variety of security measures that are reasonably designed to protect the safety of your Personal Information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction when you enter or submit your Personal Information on the Offerings. However, no Internet or email transmission is ever fully secure or error free. Please keep this in mind when disclosing any information to us via the Internet. IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED THROUGH USE OF THE OFFERINGS, PLEASE CONTACT US IMMEDIATELY.
For more information about how we secure your Personal Information when using the Offerings, please see our security page here.
When you use the Offerings, Personal Information about you will be stored in the United States.
Data Analytics are required to provide the Offerings, improve the Offerings or for marketing purposes. We collect your consent for these activities where required or where we believe it is correct to do so. This includes analytics completed by Consensys and third-party services that we use. We also describe how we advertise on third-party sites based on the analytics described here.
Subject to consent requirements, we may use first-party analytics to provide the Offerings, including analyzing the performance of the Offerings for product improvement, or for marketing purposes as described above. We may also use third-party web analytics services on the Offerings (subject to your consent), such as those of Google Analytics. These third-party services use the sort of technology described in the “Information Collected Automatically” section above to help us analyze how Users use the Offerings (such as our websites), including by noting a third-party website from which you arrive. The information collected by the technology will be disclosed to or collected directly by these third parties, who use the information to evaluate your use of the Offerings. We also use Google Analytics for certain purposes related to advertising, as described above. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-Out Browser Add-on.
Advertising. Subject to your consent, third-party services, which may include Google Analytics, Google Tag Manager, Hubspot, Segment or LinkedIn, may use cookies and web beacons to collect information about your activities on the Offerings (such as our websites) to provide you advertising based upon your interests. This means these third-party services may show our ads on sites across the Internet based upon your previous visits to the Offerings. Together with these third-party services, we may use these cookies and web beacons to report how your ad impressions, other uses of ad services, and interactions with these ad impressions and ad services are related to your visits to the Offerings.
The use of tracking technologies by third-parties, technology partners or other third-party assets (such as social media links) on the site is not covered by this Privacy Notice. We do not have access or control over these technologies.
If you would like to learn more or opt out of receiving online display advertising tailored to your interests, please visit the Networking Advertising Initiative at: www.networkadvertising.org/managing/opt_out.asp or the Digital Advertising Alliance at: http://aboutads.info/choices.
The Offerings enable you to interact with certain third-party services, decentralized applications, and third-party platforms (collectively "Third Party Platforms"). However, this Privacy Notice does not address, and we are not responsible for, the privacy practices of any third parties, including but not limited to those that operate websites to which the Offering links. The inclusion of a link on the Offerings does not imply that we or our affiliates endorse the practices of the linked website. Your use of such Third Party Platforms and those Third Party Platforms' use of your Personal Information is subject to their respective terms of use and privacy notice (if any) and is not subject to this privacy notice.
Where you have sought to interact with a Third Party Platform through the Offerings and to share Personal Information as required for such interaction, we will seek, where permitted and where possible, to limit the Personal Information shared through the use of proxies.
If our website links to other websites that include our branding, this Privacy Notice does not apply to those other websites. Visitors to those websites are advised to carefully read the notices on those individual websites.
If you are under the age of majority in your jurisdiction of residence, you may use the Offerings only with the consent of or under the supervision of your parent or legal guardian. Consistent with the requirements of the Children ’s Online Privacy Protection Act (COPPA), if we learn that we have received any information directly from a child under age 13 without first receiving his or her parent’s verified consent, we will use that information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use the Sites and subsequently we will delete that information.
In the event of a change in ownership, or a merger with, acquisition by, or transfer or sale of all or a portion of our assets to another entity, we reserve the right to transfer all your Personal Information to that entity. We will use reasonable efforts to notify you of a transfer to an unaffiliated third party (by a posting on our homepage, or by email to your email address that you provided to us, as chosen by us at our discretion).
We reserve the right to amend this Privacy Notice at any time to reflect changes in the law, our data collection, use or sharing practices or advances in technology. We will make the revised Privacy Notice accessible throughout the Offerings. You should review this Privacy Notice periodically. The “Date of Last Revision" included at the beginning of this privacy notice will indicate when it was last updated.
By continuing to access or use the Offerings, you are confirming you have read and understand the latest version of this Privacy Notice.
If you wish to lodge a complaint about how we process your Personal Information, please contact us as described in the “Contact Us” section below. We will endeavor to respond to your complaint as soon as possible. You may also lodge a claim with the applicable supervisory authority.
If you would like to exercise your rights with respect to your Personal Information, please contact us using this form.
If you have any questions or comments about this Privacy Notice or our privacy practices you can contact us by email at: [email protected].
Alternatively, you can write to us at: 5049 Edwards Ranch Rd, Fort Worth, TX 76109, United States.
EU, Turkey, Switzerland, and the United Kingdom (EEA+)
Effective: 18 June 2024
This Supplemental Privacy Notice applies to you only if you are a natural living person and you are located in the European Union, a European Free Trade Association country, Turkey, Switzerland, or the United Kingdom (“EEA+”). If you are located in the EEA+ and engage with the Offerings, Consensys is the data controller with regard to the provision of the Offerings. This Supplemental Privacy Notice is incorporated into and forms part of the Consensys Global Privacy Notice.
This Supplemental Privacy Notice provides supplemental notices that are unique to the EEA+ region.
In accordance with our legal requirements in this region, we are required to identify and inform you of the legal basis that we use for the processing of your Personal Information. In this section we provide you with information about the legal bases we rely on when processing your Personal Information.
If you are located in EEA+ our legal basis for processing your Personal Information is described in this section. Please note that more than one legal basis may exist for the processing of your Personal Information:
Consent.
This is the case where you have consented to the use of your Personal Information.
Contract.
The performance of the contract is used as the legal basis for the processing of your Personal Information for the purpose of providing the Offerings to you. For example, we need your Personal Information to provide you with our Offerings, to perform our obligations associated with our contract with you, such as to create and secure your account, to respond to your inquiries or to take steps that you request prior to signing up for the Offerings.
Legitimate Interest.
We have a legitimate business interest in processing your Personal Information to provide the Offerings to our Customers. We only rely on legitimate interest as a legal basis when the legitimate interests do not override your fundamental rights and freedoms associated with privacy and data protection on balance. We ensure we comply with any requests you make to exercise your associated rights.
The processing of your Personal Information where legitimate interests are used as the legal basis for the processing of your Personal Information may include the following purposes: to communicate with you, to optimize our Offerings, for compliance, fraud and safety purposes and to provide the Offerings.
Legal Obligation.
We may have a legal obligation to process your Personal Information, for example to comply with tax and accounting obligations (which may include anti-money laundering (AML) laws and know-your-customer (KYC) requirements). We may process your Personal Information when necessary to establish, exercise, or defend legal claims.
The Consensys Software, Inc. Data Protection Officer can be reached at: [email protected].
As part of a global business, we need to transfer your Personal Information outside of the EEA +.In this section we describe how we ensure the protection of your Personal information, through the use of safeguards, when we transfer your Personal Information outside the EEA+.
If you provide us with your Personal Information when using the Offerings from the EEA, Turkey, Switzerland or the UK or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your Personal Information outside of those regions to the United States for storage and processing.
When we transfer your Personal Information internationally, we ensure that relevant safeguards are in place to afford adequate protection for your Personal Information and we will comply with applicable data protection laws, by relying on an EU Commission adequacy decision, or the current standard contractual protections for the transfer of your Personal Information or a derogation if one is available.
Please contact us using the methods described at Section 16 of the Global Privacy Notice if you want further information on the specific mechanism used by us when transferring your personal information out of EEA+.
You have the right to contact the appropriate supervisory authority at any time to lodge a complaint regarding the processing of your data. The list of EU supervisory authorities is located here. All other supervisory authorities can be located via a search for their website homepage.
Residents in US States with Privacy-related Consumer Protection Laws
Effective: 18 June 2024
This Supplemental Privacy Notice applies to you only if you are a natural person and you are a resident of any state in the United States with a privacy-related Consumer Protection Law. This Supplemental Privacy Notice is incorporated into and forms part of the Consensys Global Privacy Notice.
Please note that the rules implementing some of these laws have not yet been finalized. We are continuously working to better comply with these laws, and we will update our processes, disclosures, and this notice as these implementing rules are finalized.
This Supplemental Privacy Notice provides supplemental notices that are unique to the US states referenced above.
The Personal Information we may collect, use and share over the next 12 months is set out above in the Global Privacy Notice. Specifically:
Global Privacy Control (“GPC”) is a setting you can enable in your web browser to communicate your privacy preference for not having certain information about your webpage visits collected across websites. For all the details, including how to turn on GPC, visit https://globalprivacycontrol.org/.
In the last 12 months, we have allowed third party ad providers to collect Personal Information from visitors to certain Offerings (for example, our websites) for the purposes of advertising and analytics. This practice may constitute the “sharing” (which is a term used to address the sharing of information for advertising purposes) of Personal Information. To the extent that our practices constitute the sharing of your Personal Information, you have the right to opt-out of the sharing of your Personal Information with the third parties in this Privacy Notice by contacting us using the methods described at Section 16 of the Global Privacy Notice. You can also opt-out by enabling Global Privacy Control (see Section 2 above).
You have the right to know whether your Personal Information is being sold. We do not sell your Personal Information. Your personal information is “sold” when it is provided to a third party for monetary or other valuable consideration for a purpose that is not a “business purpose” as set forth in the CCPA or other U.S. state data privacy laws. Please note a “sale” does not include when we disclose your personal information at your direction, or when otherwise permitted under law.
We do not sell your Personal Information, so we do not offer an opt out. We may “share” personal information with third parties for personalized advertising purposes as described above. You may indicate your choice to opt-out of the sharing of your personal data with third parties for personalized advertising on third party sites by contacting us using the methods described at Section 16 of the Global Privacy Notice. You can also opt-out by enabling Global Privacy Control (see Section 2 above).
Even if you turn off “sharing,” you may still see personalized ads based on information other companies and ad networks have collected about you, if you have not opted out of sharing with them.
U.S. state privacy laws prohibit businesses from discriminating against you for exercising your rights under the law. Discrimination may include denying services, providing a different level or quality of service, or charging different prices. We do not discriminate.