Settings stay in your browser (localStorage). Requests are proxied through the dev server to avoid CORS.