Project source remains on the user's computer. The relay stores only device pairing, OAuth state and bounded request/result payloads needed to route explicit tool calls. It is not a cloud source-sync store.