diff --git a/content/tos.md b/content/tos.md
index 6935afd..eb8a4de 100644
--- a/content/tos.md
+++ b/content/tos.md
@@ -91,6 +91,8 @@ The data the server gets when using the Git server is:
 - anything pushed to the repos, including the commit history;
 - any commit, comment, issue, pull request, etc.
 
+The credentials can be remembered on the current browser with a cookie (when you tick "Remember me" on the login page), that's the only cookie that the site gives you.
+
 All of this data **can be seen by anyone**, except for login credentials and private repos which **can only be seen by the account/repo owner, the server and who can access the backend**, that means me, except for the password which **can't be seen at all**.
 
 # The Matrix server