Credentials are never stored. Your session token is kept in sessionStorage (cleared when you close the tab). Scores are cached locally for instant loading.