Theoretically, it could store the password in a cookie, and later retrieve it, along with (somehow) a gmail id.