I believe it says somewhere that the credits are stored on the guy's machine who you're downloading from. That prevents the credit system from being hacked. I don't know which circumstances reset it, but I believe something as simple as a client upgrading does.