Verify it yourself. Trust no one — not even us.
Verification runs in your browser. The token never leaves this machine — you are checking a signature against published keys.
checked with WebCrypto against published keys — nothing is uploaded