Yes, but they are encrypted and at least your not putting them directly into a website. Theoretically, they never leave your machine. I'm not a programmer but from everything I've read and from one BP candidate that I spoke with at a meet-up, this is the safest way for someone like me :-)