Your keys and data are kept confidential by running cryptography operations in your browser using OpenPGP JavaScript and JavaScript is left unminified so you can verify page source.