Today runs entirely in your browser, so it needs JavaScript. Nothing is sent anywhere — enabling it does not expose you to any server.