How it works: Your text is encrypted locally using AES-256-GCM before leaving your device. The server stores only unreadable ciphertext. The decryption key travels exclusively in the URL fragment (#k=...) which browsers never send to servers. Keep the complete link private until you share it with your recipient.