Passwords are hashed, sessions are signed and expire, and access tokens for your social accounts are stored server-side and never shown back to you.
If you believe you found a vulnerability, contact our support address with details and we will respond promptly.
This is a template.