I am curious as well with the last questions: Encrypted at rest? And can the owners (service maintainers) see the saved data? Scanning through the faqs and privacy pages, the only bit I found relevant is in Privacy Policy section 14 "Data Security" which, as most privacy policies, is quite vague on details. I'd say I would be wary about putting in my Github key to download my repo to use Android Studio or IntelliJ, or credentials/keys to access services for testing my codes, whether the session is ephemeral or persistent. It's hard to tell.