This page holds nothing until you unlock it. Everything below is a single AES-256-GCM blob; the passphrase never leaves your browser.
PBKDF2-SHA256 at 10,000,000 iterations, which costs about
a second per attempt on purpose. Everything is decrypted and rendered
in this browser; nothing is uploaded, and the passphrase is never
stored.