Developer portal privacy

The portal stores authentication state only as documented. It does not persist claim values, authorization codes, secrets, or raw identity data in browser storage.