Paste the capability hash of your wallet. The hash stays on the server — your browser only holds an opaque session cookie.
The hash is never placed in URLs or browser history. Anyone holding it can access this wallet, so paste it only on this page.