All secrets are encrypted using AES in your browser. This means that inserted secrets are never sent or stored in unencrypted form. Likely, your pass-phrase is never sent or stored anywhere. Only you can decrypt your secrets so pick a passphrase that you can remember. All data is stored under your document as properties.