What exactly is MoonProxy?

In one sentence: it puts your local services on the internet. Say the company ERP normally only works inside the office network. MoonProxy gives it a public address, so you can open it from a hotel or from your phone. Your home NAS, a self-built site, a private game server — same idea. Under the hood, it's a desktop client that gives intranet exposure a graphical interface — so you never have to touch a command line.

What can I do with it?

Typical use cases include: ① Remotely accessing an internal ERP, OA, or finance system; ② Hosting a Minecraft, Palworld, or other game server with friends; ③ Sharing an AI-generated webpage, self-built blog, or docs site; ④ Connecting back to a home NAS, file store, or remote desktop from the road. If a service runs on your machine and needs to be reached from outside, MoonProxy puts it online.

Which computers does it support?

macOS (both Apple Silicon M-series and Intel) and 64-bit Windows. Installers are on GitHub Releases: DMG for macOS, an EXE installer for Windows. Download and double-click to install.

Do I need to be technical, or write config files?

Not at all. MoonProxy is made for people who'd rather not touch a terminal. Everything happens in a graphical interface — add a tunnel like filling in a form, start and stop it like a light switch. What you see is all there is.

How is it different from a VPN?

In short: a VPN pulls your whole device into a virtual network, ideal when you want many devices to feel like one LAN. MoonProxy publishes a specific service to the public web — more precise, more deliberate. Want remote desktop to every home machine → pick a VPN. Want to expose just one site, game server, or ERP → pick MoonProxy. The two can coexist without conflict.

Is the traffic I expose through it secure?

Security is layered: ① Transport — communication is encrypted end to end, the auth key stays with you, and MoonProxy itself never stores or relays your application data; ② Control — you can give each tunnel its own key, open it only during working hours, and shut it down with one click. Recommendations: use a different strong key per tunnel; close tunnels when idle; expose only the ports you need on the firewall. All of this is doable right from the interface.

Do I need my own public server?

Yes. MoonProxy pushes your service out, but something with a public address has to receive it. Common options: ① rent an entry-level cloud VM; ② use a community-public relay node (evaluate trust yourself); ③ run a lightweight relay on a serverless platform. Users share step-by-step guides in the repository's Discussions.

Why does macOS warn me on first launch?

The fix is simple: on first launch, right-click the app → Open → confirm in the dialog. Or drag it to /Applications and run xattr -cr once to drop the quarantine flag — after that, double-click works normally. Intel Macs typically don't show this warning.

Is it open source? Does it cost anything?

Fully open source under the MIT license, free forever. Source code and every release live on GitHub at MoonProxyHQ/moonproxy-desktop. You can audit it, build it locally, even customize your own variant.

I'm a developer — where are the technical details?

Welcome. MoonProxy is built on Tauri v2 (Rust + Vue 3) and bundles the frpc binary via the sidecar mechanism — ready to use, no separate install. Technical features include: visual management of TCP/UDP/HTTP/HTTPS tunnel rules; connection state derived from real frpc evidence (not optimistic flags); local port health probing every 3 seconds; a scheduler that hot-reloads every minute; engine self-update pulling from upstream GitHub Releases with SHA256 verification and atomic swap; and app self-update via tauri-plugin-updater. Full source and docs are on GitHub.

Back to home

Privacy Policy

Last updated: 2025-07-01 · 中文版本

MoonProxy (also known as 月神代理) is an open-source desktop frp intranet-tunnelling client for macOS and Windows, developed by MoonProxyHQ and released under the MIT license.

Short version: MoonProxy requires no account, collects no personal information, and never uploads your proxy configuration or application data to our servers. Your data stays on your device. The only outbound connection we initiate is to GitHub when checking for updates, and the app contains no third-party analytics or advertising SDKs.

1. Scope

This Privacy Policy applies to:

The MoonProxy desktop client (macOS and Windows)
The MoonProxy official website (moonproxy.app and its subdomains)

MoonProxy is an unofficial GUI client for frp (fatedier/frp) and is independent of the frp project. This policy does not cover the upstream frp project, nor any third-party frps server you set up or choose to use.

2. Information we collect

2.1 Desktop client

MoonProxy does not require an account and does not collect personal identifiers such as name, email address, or phone number.

The following data is stored only on your device and is never uploaded to our servers:

Proxy rule configuration: tunnel rules you add (local port, remote port, protocol type, etc.)
frps server details: the server address, port, and auth token you provide
Scheduled-connection settings: the time windows you configure for automatic connect/disconnect
Application preferences: settings such as launch-on-boot and silent-start
Runtime logs: connection-state output from the frpc subprocess (local only, never transmitted)

These configuration files are managed by the OS in the standard application-data directory. You can locate and delete them at any time, or remove all local data simply by uninstalling MoonProxy.

2.2 Network requests

MoonProxy makes the following outbound network connections at runtime:

Your frps server: tunnels your local service to the frps server you specify. MoonProxy does not log, store, or act as a man-in-the-middle for any application data passing through the tunnel.
Local endpoint health probes: MoonProxy periodically checks whether your configured local ports are reachable. These probes originate on your own machine and never leave it.
GitHub API — update check: MoonProxy queries the GitHub Releases API (api.github.com/repos/MoonProxyHQ/moonproxy-desktop) to check whether a new version of the app or the frpc engine is available. The request contains no personal identifier. GitHub's privacy policy governs this request (GitHub General Privacy Statement).
frpc engine self-update: when a newer frpc version is found, MoonProxy downloads the binary from GitHub Releases, verifies its SHA256 checksum, and atomically replaces the local file. This download flows through GitHub directly — not through our servers.

Outside of the connections listed above, MoonProxy does not communicate with any external server. The app contains no analytics, advertising, or crash-reporting SDKs.

2.3 Official website

The MoonProxy website is a static site hosted on Cloudflare Pages. It sets no cookies and embeds no third-party analytics scripts (e.g. Google Analytics).

Cloudflare may record anonymous access logs at the network layer (IP address, request path, timestamp, etc.) for CDN performance and security purposes. Cloudflare's privacy policy governs this data (Cloudflare Privacy Policy).

3. How we use information

We do not sell, rent, or share any user information with third parties.

Our principle is simple: if we don't need it, we don't collect it. MoonProxy is a local-first tool — its core functionality runs entirely on your device, with no dependency on our servers.

The limited information we are incidentally exposed to (such as the IP address implicit in a GitHub update request) is used solely to deliver the feature itself. It is never used for user profiling, targeted advertising, or commercial analytics.

4. Third-party services

MoonProxy relies on the following third-party services, each governed by its own privacy policy:

GitHub (Microsoft): used for distributing releases, checking for updates, and downloading frpc engine updates. Governed by the GitHub General Privacy Statement.
Cloudflare: CDN and hosting provider for the official website. Governed by the Cloudflare Privacy Policy.
frp (fatedier/frp): MoonProxy bundles the frpc binary. frpc's behaviour is defined by the upstream open-source project. Your tunnelled traffic passes through the frps server you configure, and is subject to the privacy practices of that server's operator.

Note on your frps server: traffic published through MoonProxy is relayed by the frps server you set up or choose to use. MoonProxy has no control over how that server is operated or how its operator handles data. Please evaluate the trustworthiness of any frps server, especially community-run public relay nodes.

5. Data security

Local storage: sensitive configuration (such as frps auth tokens) is protected by the OS application sandbox and stored in the standard app-data directory.
Encrypted transport: communication between frpc and frps uses TLS (when correctly configured on the frps side); your auth token is known only to you.
No back-end servers: because MoonProxy operates no back-end servers of our own, there is no risk of our servers being breached and exposing your data.
Open-source and auditable: MoonProxy is fully open source under the MIT license. The source code is publicly available at GitHub and can be independently audited by anyone.

6. Your control over data

Because MoonProxy stores no user data on our servers, you retain complete control over your own data:

View your data: all configuration files reside in your system's app-data directory and can be viewed directly
Delete your data: uninstalling MoonProxy removes all local data; you can also manually delete the app-data directory to clear residual files
Stop network requests: disabling automatic update checks in the app settings stops all requests to the GitHub API

7. Children

MoonProxy is a general-purpose technical tool and is not directed at children. Because we collect no personal information, there are no special considerations relating to the processing of children's data.

8. Changes to this policy

We may revise this policy as the software evolves or as laws change. Material changes will be noted in the GitHub Release Notes and reflected in the "Last updated" date at the top of this page.

Your continued use of MoonProxy after a policy change constitutes acceptance of the updated policy. If you disagree with any change, you can stop using and uninstall MoonProxy at any time.

9. Contact

If you have questions about this Privacy Policy, please reach us through:

Email: [email protected]
GitHub Issues: MoonProxyHQ/moonproxy-desktop