They are locked in a smart contract where no one has access to them, not even eCredits. After the locking period, the user can claim the funds.