Login/activity logs are stored in audit_logs / security_logs / admin_actions — see database/schema.sql:222. Frontend demo logs in admin panel memory.