Your API key is stored only in this browser (localStorage) and is never sent to us or to Supabase — it goes straight from your browser to the provider you choose below when you analyse responses.