No. Encoding happens in this tab, and the page's security policy blocks it from sending data anywhere. Safe for tokens and keys.

The same encoding with - and _ instead of + and /, and no = padding, so it can sit in a web address or a JWT.