Password and form data is stored in plain text within a Sitemap Creator project file.
If you use Forms, Passwords or Cookies to authenticate with a website, you should consider adding a custom rule to exclude any logout pages. Otherwise, if Sitemap Creator detects this page, eventually it will access it and your session will be logged out, potentially affecting the remainder of the crawl.