Is there any possibility that a webapp or website I am using could be tracking or recording what I type on the page (into no box) or into input or textboxes without me having submitted a form/clicked a button after doing the typing?

For example, what happens if I accidentally paste a username/password into a text form on a website I am visiting?