Your API key is used only to verify your identity via the Torn API. It is never stored anywhere — not in cookies, not in localStorage, not on any server. It is used once for this verification call and then discarded.