Hashes are computed locally using the browser's Web Crypto API (MD5 uses a small local implementation, since browsers don't provide it natively). Nothing you type here leaves your browser.