That whois information is interesting, I registered the domain through google domains. The Canadian company is probably being used by google for whoisguard reasons?

The site runs client side only, with no external API calls, so assuming you trust the code in the repo is the code being served to you then no data can leave your computer. If you're curious you could probably verify by clicking around on the site and checking the network calls made to ensure there's no external API calls