Hi, it depends of which plugin and options you’re using.
If you’re toggling the “proxy through server” on a REST request it will be forwarded by our server for exemple.
If you’re using WeWeb Auth it will also ping our servers.
If you’re using Airtable we have a microservice to hide your API key so it use our servers.
If you’re using OpenAI its also a microservice to hide your API key and secure prompt.
Except a couple of exception, anything else is a direct connection between your frontend running in the browser and the connected API without WeWeb as a middleware.
If your application connect with xano, supabase, rest api or graphql you should be fine.