Publicly available Matomo instance

Hi,
Does it need to be publicly available to properly measure/track the user traffic or it can/should be available internally and all traffic should be proxied from the main app?
regrads,