No — bcrypt and Argon2 demos run locally; nothing is logged server-side.

Yes — UUID, API key and secure token generators run in your browser session.

Decode locally — optional JWKS fetch is the only network call and is under your control.