Your credentials go straight to Tripsy's API. Nothing is stored on any server — the token stays only in this browser.