The key is stored only in this browser and is sent only to Helius. Read-only ยท never signs anything.