The password is sent straight to the university, used once to get an access token, and never saved.
Description read from the page itself, because the listing it was found in gave none.
BitsExplorer