This uses real AES-GCM encryption with a key derived from your password via PBKDF2 (SHA-256, 100000 iterations). The strength of your encryption depends on the strength of your password, so pick a long, unique one. Everything runs in your browser and nothing is uploaded.