anything inside local storage is accessible by any script inside your page. This is why storing JWTs in local storage is a bad idea, but storing app state would be fine.
RethinkDB realtime