The server only stores ciphertext. The decryption key never leaves your browser — even we cannot read your secrets.