Hardware keys (unlike humans) usually check page URL and do not send the data stored by another domain.