Your nsec key is only stored locally in your browser. The signing and broadcasting of the tweet are also done entirely on your local machine.