Uses zero knowledge end-to-end encryption (AES-256). You can verify this by checking the network monitor on your browser, and checking the data sent to server. Nothing is sent in plaintext.