Stored in this browser's local storage for this site, unencrypted: anyone with access to this browser profile can read it. It is sent to OpenRouter and to nothing else, and never enters an app or its file.
Blank model and "default" effort follow the app's defaults.