The refresh credential is kept in a Secure, HttpOnly, SameSite cookie that JavaScript cannot read. The short-lived access token stays in memory only.

Application files and the public catalog may be available offline. An offline balance can be the last known value, but points cannot be earned or spent without a connection.

Session, profile, staff and management routes and member codes are explicitly excluded from caches.