Port Forwarding Helper Privacy Policy

Last updated: October 15, 2026

This policy explains how Port Forwarding Helper, provided by Lone Fondness, handles information when you use the macOS app. For privacy questions, contact support@lonefondness.com.

Overview

Port Forwarding Helper manages SSH port forwarding using servers and services you configure. It does not require an app account and does not send your tunnel configurations, private keys, passphrases, diagnostic logs, or forwarded traffic to the developer. The app does not include advertising, analytics, tracking, or automatic crash-reporting SDKs.

Information stored on your Mac

The app stores tunnel names, SSH host addresses, usernames, ports, destination addresses, connection preferences, and trusted SSH host public keys in its local app storage. These settings are used to establish connections, verify server identity, and restore enabled tunnels.

Private key file contents selected by you are stored encrypted using AES-GCM. The app’s encryption key is stored in macOS Keychain. If you choose to remember a private key passphrase, it is stored separately in Keychain. Unlocked keys may be held in memory during the current app session. The app does not provide cloud synchronization of these settings or credentials. Files and local data may nevertheless be included in backups or storage services you configure independently.

Network connections and forwarded traffic

The app connects to the SSH servers and destination services specified in your configurations. SSH servers receive connection information needed to operate the tunnel, such as your source IP address, SSH username, public key authentication information, and forwarding requests. Private keys and their unlocking passphrases are not sent to SSH servers.

Forwarded traffic is processed to deliver the connections you request; the app does not create a stored record of its contents. Traffic within an SSH connection is encrypted. A server acting as an SSH relay may access traffic after SSH decryption, and connections between tunnel endpoints and destination services depend on those services’ own security. Two SSH tunnels through a relay do not by themselves provide end-to-end encryption between the two computers.

Servers, destination services, and network providers you use may keep their own records. Their handling of information is governed by their own practices and is outside the developer’s control.

Diagnostic logs

The app keeps up to 200 recent diagnostic events in memory during the current session. Events may include timestamps, tunnel names, connection status, error details, host addresses, and ports. The diagnostic log does not record private keys, encryption keys, or passphrases. You can clear it in the app, and it is discarded when the app exits.

Logs are not automatically uploaded. If you save a log, the resulting text file is not automatically redacted or encrypted. Review it before sharing.

Configuration import and export

Configuration files are read or written only when you choose to import or export them using the macOS file dialogs. Exported .pfhconfig files contain tunnel settings and private key file contents and are encrypted using a separate password you provide. Remembered private key passphrases and trusted host records are not included. The app does not save the export password.

You control where exported configurations and logs are saved and whether they are shared. Keep configuration files and their passwords protected.

Your choices and deletion

You can disable or delete tunnels and clear diagnostic logs in the app. Deleting a tunnel removes its saved configuration from the app’s active configuration list, but does not delete the original private key file, exported files, trusted host records, or shared Keychain items. Remove saved passphrases and the app’s encryption key separately using macOS Keychain Access if needed. Removing the encryption key can make remaining encrypted configurations unreadable.

Removing the app does not guarantee that its local container, Keychain items, exported files, or backups are deleted. You can remove these separately using macOS tools and your backup provider’s controls. The developer has no remote access to erase data stored on your Mac or on your chosen servers.

Support and external services

If you email support, we receive your email address and whatever information you choose to include. We use it to respond to your request and address the issue, retaining it only as needed for support and applicable legal obligations. Do not send private keys, passphrases, or configuration export passwords. To request deletion of support correspondence, contact the email address above.

Opening Help launches the support website in your browser. Website hosting, email services, Apple’s App Store, and any macOS diagnostic sharing you enable operate under their respective privacy practices. This policy describes the app; it does not make claims about website cookies or website analytics.

Changes and contact

We may update this policy to reflect changes to the app or its information handling. The date above identifies the latest revision.

Privacy and support contact: support@lonefondness.com
Support website: Lone Fondness