They are. The leak is that if a webpage you visit creates several databases with certain names, the order is random but stays the same within the same browser session.