It could be fully automatized within the browser, or even just create a new key at the beginning of the session, delete it when it's closed. The data would be

It could be fully automatized within the browser, or even just create a new key at the beginning of the session, delete it when it's closed. The data would be encrypted and protected.