You own your identity. The data is public
You own your nsec. Yes.
Yes. The keys you use to sign events are your own