It gets encrypted with the passphrase you input and is stored locally in your browser. Since the site is basically entirely client-side, the risk is very minimal as servers are not communicated with while signing.