They are stored in the browser's storage, fully encrypted at rest. On mobile they're stored in the app's private sandbox, also encrypted at rest.

To clarify: the protection comes from the encryption, not from where the file lives. Cleartext never touches the disk.