The key is kept only in this browser tab and is sent only to the API endpoint.
Conversations stay in this tab only — nothing is stored.