Your PDF file is processed entirely in your browser. It is never uploaded to any server.
If left blank, the user password will be used. The owner password allows you to set restrictions (e.g., on printing, copying) even if the user knows the open password.