Session credentials live only in your session. Anything you choose to save is stored in connections/*.env on the server, not sent back to your browser.