An account (email sign-in) and the subscription. A translation is sent to a model. The scripts still run where the credentials already are. No cloud key and no Splunk token are stored. The company policy is on the privacy page.
Analytics stay off unless you allow them. Cookie notice