Instead, store a token that you can use to look up the sensitive information on the server.