Most probably it'll have to be persisted on your server. Sandboxing dictates that an applet can't have access to a local filesystem, and although this can be gotten around, ask yourself "would I like to install a piece of software from an unknown source that can access my hard drive through my web browser?". Personally, I wouldn't