On Linux it stores settings under .config/nVelope/ in your home directory.

In a web client, the identity lives in the browser: localStorage or IndexedDB, usually as the raw key. A key sitting in a browser tab is one bad dependency away from gone, and there is no undo. A signer keeps it elsewhere: the client holds a throwaway key, asks for a signature, and the real key neve...