the data for your extension is stored locally on some web apps. i do not know about all of them though. there's a chance that while you were using a web app w/o extension that your key was compromised because it was saved in local storage. clear you local storage and hope nothing happened while you were using that app.