Sessions are encrypted and stored server-side — closing your browser doesn't leave your account open on a shared device.