Your API key is stored locally in IndexedDB and only sent to OpenRouter. Pages are cached locally for faster navigation.