We don’t store the username/password once the session expires. We store the session in memory, not on disk, which also lowers our risk.

You give your username/password to client side/desktop applications which could easily send them elsewhere. Some people would be able to detect this. However, the vast majority of people would not.

We are thinking of adding Google Gears support. This would let users download and edit files offline. When they reconnect, they are instantly updated.

If you have any other concerns or questions, I’d love to hear them.

Eventually, we are looking