Right now they are stored as plaintext on a VPS server (or in localStorage in your browser if you aren't signed in).

I was wondering whether encryption might be compelling as a premium feature if this ever got enough users to think about monetizing it in future. What do you think?