There's a good Watchman Privacy podcast episode where they explained their operation. I've been using them ever since.