Everything is encrypted locally. The full encrypted payload is stored inside the link (URL fragment). No server, no external storage.
If you leave password empty: the decryption key will be embedded in the link fragment (after #). Share the full link to allow the recipient to open it. If you set a password: share the link and password separately.