The key is passed in the URL fragment. URL fragments do not leave your browser.

Implementation details here: https://ente.com/blog/building-shareable-links/