Files are encrypted with AES-256 (PDF 2.0 standard). Without the password the content cannot be opened or extracted in a standard PDF reader.
The user password is required to open the file. The owner password (optional) controls who can change permissions like printing or copying. If omitted we reuse the user password.
No. Encryption runs entirely in your browser. Your password never leaves the page.