The control token is sent only to Atlas for verification and is kept in memory for this page session. It is not written to browser storage.