They send all typed into editor input to codepen. dev almost immediately (you would see in 1-2 sec after you typed your secret that it appears in respective Network/Response tab) even before one saved it. I tested this with a unique marker: after typing it into index.
Source: [Hacker News](https://news.ycombinator.com/item?id=49596976)