Local only. Your token is decoded right here in your browser and is never sent anywhere. Never share a real bot token — anyone with it controls your bot. This reads the ID baked into the token; it can't check whether it's still valid (that would require sending it to Discord).