// seal

Lock it before it leaves the browser.

Encryption happens here, on your machine. The upload goes through your own edge Worker, which holds the token as a secret — the page never sees it.