The files are uploaded to the server after being encrypted in the browser. Only the one who has the correct URL can decrypt them (even the site owner can't).
Files are permanently deleted from the server after the first view. Not shown files will auto-destruct in 24hrs.

All JavaScript files on this page are not minified to allow for verification, the browser is instructed to verify the scripts checksums on load.