No, the devs don't have your key. The vast majority, if not all, Nostr web clients store the key in your browser cache. It's locally stored on your device. Some clients encrypt this, some do not.

Always use an extension or nsec.app bunker if you can.