If you use chrome, they could just download your cookies if they really wanted to.