Security notice: API keys are stored in your browser's sessionStorage (cleared when you close the tab) and are never sent to any third-party server. They are transmitted directly from your browser to the respective AI provider via this app's API route over HTTPS.
XSS risk: Any malicious script running on this page (e.g. a compromised browser extension) could still read your keys from sessionStorage. Avoid installing untrusted extensions and rotate keys regularly.