Generated locally in your browser with crypto.getRandomValues — nothing is sent to a server.
crypto.getRandomValues