Your secret is encrypted in your browser. The decryption key lives only in the link's URL fragment, which is never sent to our servers.