Both values stay in this browser only. Run setup() in Code.gs to get the token, then deploy the script as a web app to get the URL.