Compare the DCQL query of an OpenID4VP request with the credentials and claims the relying party registered in its registration certificate. OpenID4VP request against ETSI TS 119 475
Everything stays in your browser. All parsing and checks run on this page, and nothing you paste, drop or check is sent to a server. The page only makes a request when you fetch a URL or check a signer against the EU List of Trusted Lists, and your browser sends it straight to that URL. A link to a result holds the input after the #, which browsers do not send to a server.