Last updated: October 11, 2026
MegaProxy is an Android VPN client for proxy servers you choose. It does not provide a proxy service, require an account, or automatically send usage data or crash reports to the developer. It contains no advertising, analytics SDKs or tracking services.
MegaProxy stores your connection profiles, credentials, settings and trusted SSH host keys to connect to your servers. Passwords, imported private keys, configuration-subscription URLs and subscription credentials are encrypted with a key held by Android Keystore. Android backup and device transfer are disabled for app data.
For per-app routing, MegaProxy reads the applications visible to it on your device and stores which applications you select. This information is used locally to configure routing, not uploaded as an application inventory. Profile exports can include these routing selections.
Connection statistics and diagnostic/crash logs are processed locally to display connection status and help troubleshoot failures. Logs contain operational events and error details; filtering is designed to remove credentials and sensitive addresses. Review reports before sharing.
MegaProxy forwards selected application traffic to your configured proxy servers and sends the authentication information needed to connect. SSH authentication does not transmit private keys. Proxy operators can see connection metadata and destinations, and unencrypted application content. SOCKS5 does not encrypt its proxy connection, including credentials. Choose operators you trust.
DNS providers receive the names being resolved. Before connecting, MegaProxy may resolve your proxy's hostname directly through Cloudflare, Yandex, Google or Quad9; these resolvers can see your source IP address and the proxy hostname. DNS queries intercepted by MegaProxy use the configured provider and permitted fallbacks. Applications can also use their own encrypted DNS connections; these follow normal routing.
When you run a connection test, MegaProxy contacts a test website and external IP/country lookup services through the proxy; MASQUE and SOCKS5 tests also contact external HTTP/3 diagnostic services. They receive the exit IP and test requests, including TLS/QUIC connection parameters, to check connectivity and identify the proxy's apparent country, not your GPS location. The current services are listed in Network privacy details. These providers handle requests under their own policies; MegaProxy does not control their retention practices.
If you configure a configuration subscription, MegaProxy downloads snapshots from the HTTPS sources you list, automatically at the interval you choose when Android permits background work, or when you request an update. Each source receives its configured URL path/query, optional subscription Basic Auth, app version, the common Android client identifier and the source IP. These requests follow Android VPN routing for MegaProxy; they do not include your current profiles or browsing history. All listed backup sources receive the same subscription credentials. Only use trusted sources: downloaded snapshots can change subscribed profiles and supported settings. You can pause or remove the subscription in Settings; removing it keeps existing profiles. Exported JSON can disclose subscription URLs (including query tokens) and, if included, its password.
Automatic update checks are enabled by default and contact the selected source (F-Droid or GitHub) about once a day when Android permits background work. If Android does not identify an installer, no automatic check runs until you choose a source. These services receive update requests and the source IP address, not your profiles, credentials, browsing history, or application inventory. You can change the source or disable automatic checks in Settings → App updates. APK downloads from GitHub require explicit confirmation and installation requires a separate user action. See update behavior for scheduling, reminders, and source selection.
Exporting or sharing a profile can disclose its settings and, if explicitly included, passwords or private keys to the destination you choose. Copying diagnostics places them on the clipboard.
If you choose to share a feedback or crash report, MegaProxy passes it to the application you select. The prepared report contains device model, Android/app versions, a summary of connection settings and a diagnostic log attachment. You control whether to send it. The receiving application handles the shared copy under its own policies.
If you email support, the developer receives your sender address, message and any attachments you send for handling your request. Uninstalling MegaProxy does not delete that correspondence.
Profiles and settings remain locally until you change/delete them or clear app data. Diagnostic logs rotate within a configurable size limit; you can clear them in the diagnostic-log screen. Clearing app data or uninstalling removes local app files, including cached report attachments, downloaded update APKs, and update preferences. Exported files and copies shared with other applications must be deleted separately.
Support emails, including the sender address, message and attachments, are retained until the reported problem is fixed, then deleted. You can contact the developer about your correspondence at the address below.
For privacy questions or requests about information you sent to support, contact the MegaProxy developer at megaproxy-feedback@hotmail.com.