No, on the server. Also, would be pretty hard to have password resets if they truly couldn’t access your data.