Point this at your own Myosia bridge. Everything you enter stays in this browser, on this device. Nothing is saved into the page or sent anywhere except your own bridge.
The secret is exchanged once for a 24h session token. To revoke access everywhere, rotate API_SECRET on your bridge.