Your private signing key is generated locally and stored only in IndexedDB on this device. It never leaves your browser.