In the help page it says "Shared Derived Encryption Key", they exchange public keys and derive the AES encryption key through publick and private keys.
From js it seems like that, but I'm not a great expert, in the next few days I'll try to understand.
It really seems all in js, with simple-peer library, a fetch call for signaling I suppose.