“Remember me” creates a protected, HttpOnly server cookie for 14 days. It is never stored in local storage.