Your username is only used for account auth. Your password is encrypted. Your app data is only accessible and owned by you. Account is used for data syncing and accessing paid features. There is only one cookie, for account auth, and it's encrypted.