Language preference is stored locally in your browser using localStorage.
Authenticated areas use a secure session cookie.
Public accounts use the email address for account activation, login, security messages and account recovery. Unverified registrations are temporary and are deleted after the configured retention period.