encrypted — the key is after the # and never sent to the server. anyone with this URL can read it; save it, it cannot be recovered.
$ curl -T file.txt https://example.com $ pbpaste | curl --data-binary @- https://example.com