Proxi Privacy Policy

Who is responsible

Proxi is made and published by whrss9527, an independent developer (“I”, “me”). If you have any question about this policy or your data, email whrss9527@gmail.com.

What I collect

Nothing. Proxi has no analytics, no crash reporting, no advertising, no tracking and no user accounts. I don’t run a server for Proxi, so there is nowhere for your data to be sent to me. I never see what you do in the app.

What stays on your Mac

Proxi keeps its data in these places on your Mac:

Data	Where it’s kept	Notes
Profiles (name, color, type, server address, user name, scope, bypass lists) and settings	`~/Library/Application Support/Proxi/config.json`	Passwords are not in this file, only a note that a profile has one.
Proxy passwords	Your login Keychain (a generic password for the service `com.whrss9527.proxyswitch`)	Stored on this Mac only, not in iCloud Keychain.
State and log	`~/Library/Application Support/Proxi/` (`state.json`, `proxi.log`, and the socket `control.sock` while Proxi runs)	The state remembers the last profile and the proxy settings from before Proxi turned one on, so they can be restored. Passwords are hidden in the log.
Small preferences (interface language, skipped update)	`~/Library/Preferences/com.whrss9527.proxyswitch.plist`
Command-line tool, if you install it	`/usr/local/bin/proxi` (and `/usr/local/bin/proxyswitch` if an older version installed it)	A small script that starts Proxi’s own executable.

When Proxi goes online

Apart from the connections your own apps make through the proxy you set, Proxi itself connects to the following:

Service	When	What is sent
The test address (default `https://www.apple.com/library/test/success.html`, changeable in Settings › General)	When you test a connection, and when Detect checks which ports on this Mac answer as a proxy.	An ordinary request for that page, sent through the proxy being tested.
Your proxy server	Every 20 seconds while a proxy is on, if “Regularly check that the proxy server is reachable” is on.	A TCP connection to the proxy’s address and port, closed straight away; no request is sent.
The PAC address of a PAC profile	When the profile is on or tested; macOS fetches it as it does for any PAC setting.	A request for the PAC file at the address you entered.
GitHub (`api.github.com`, `github.com` and GitHub’s download servers)	At launch and every 6 hours, unless you turn automatic checks off; and when you install an update.	A request for the latest release information and, when you install an update, the download of the release archive and its checksum file. The request identifies the app and version (`Proxi/<version> (macOS)`). Nothing about you or your data is included.

Like any internet request, these connections reveal your IP address to the server you’re connecting to. Those services are run by third parties under their own privacy policies; I don’t receive anything from them about you.

iCloud

If you turn on iCloud sync, Proxi writes your profiles and the settings on the General and Hotkey pages to a file in your own iCloud Drive, Proxi/config.json, with your Mac’s name and the time of the change. Passwords are not included: each Mac keeps its own in its Keychain and asks for it once. The file is stored by Apple under your iCloud account; I have no access to it.

Permissions

Permission	Why
Administrator password	To install the command-line tool, when macOS asks for it to change the system proxy, and to remove the background helper an earlier version installed.
Keychain	To store and read the passwords of profiles that sign in to their proxy server.
Location	Only for switching by Wi-Fi network: macOS requires it to read the Wi-Fi name. Proxi doesn’t read or store your location.
Notifications	For switching, connection problems and new versions.
iCloud Drive	Only if you turn on sync.

You can revoke any of these in System Settings › Privacy & Security at any time.

Settings Proxi changes

When you turn a profile on, Proxi writes its proxy address into the places you chose for it, and clears them again when you turn it off (for the system proxy, you can choose to restore the previous settings instead):

the system proxy of your network services (with networksetup; macOS keeps a sign-in password for it in the System keychain);
the http_proxy, https_proxy, all_proxy and no_proxy variables (and their upper-case forms) in your login session (launchctl setenv), which apps and Terminal windows opened afterwards read;
git’s global http.proxy and https.proxy in ~/.gitconfig; for a profile with a password, the address is kept in ~/Library/Application Support/Proxi/git-proxy.inc, readable only by you, and ~/.gitconfig includes that file;
the proxy and https-proxy lines in ~/.npmrc, read by npm, pnpm and yarn 1.

For a profile with a sign-in, the user name and password are part of that address, as those tools expect. Apps that use these settings then connect through your proxy server; Proxi doesn’t see that traffic.

Local control

The command-line tool, the MCP server for AI assistants and proxi:// commands use a local socket on your Mac (control.sock) that only your own account can connect to, with a permission level you choose, including “off”. They can view the status and profiles, turn the proxy on or off, switch profiles and test connections; they can’t change settings or read passwords.

Where you got Proxi

This policy covers Proxi however you obtained it — from GitHub, from this website, or through a store or subscription service such as the Mac App Store or Setapp. Such a service handles your purchase or subscription and may process data under its own privacy policy; Proxi itself behaves as described here. If an edition ever works differently, this policy will be updated before that edition is released.

Deleting your data

Turn the proxy off (so the settings above are cleared), quit Proxi, then delete Proxi.app, ~/Library/Application Support/Proxi/ and ~/Library/Preferences/com.whrss9527.proxyswitch.plist. Remove the command-line tool on the Automation page first (or delete /usr/local/bin/proxi). Saved passwords can be removed in Keychain Access (search for com.whrss9527.proxyswitch). If you used sync, also delete the Proxi folder in iCloud Drive.

Children

Proxi is a general-purpose utility, not directed at children, and collects no personal information from anyone.

Changes

If this policy changes, the new version will be published on this page with a new date. Proxi is open source, so you can also check its behavior in the source code.

Contact

whrss9527 · whrss9527@gmail.com · Proxi issues on GitHub

The short version