UUIDs are generated locally using the browser's cryptographic random number generator (crypto.getRandomValues). No data is uploaded — everything runs in your browser. Generated UUIDs are collision-resistant for practical use but should not be treated as cryptographically authenticated identifiers.