Share a secret.
One-time, encrypted in your browser. The server never sees the plaintext.
This link can only be opened once. Copy it now — it cannot be recovered.
The decryption key is in the part of the URL after # and is never sent to the server.