lud04 handled that well. A new private/pubkey was derived by the wallet for each domain you logged into. Since an npub is more like an identity than an identifier if you have concerns you can generate or derive a new npub for each site you log into.