Your key is made on your device. We never see it.
The private key is generated in your browser and never sent to us, so nobody — including Litora — can produce it again.
What that means for you
Because we never had the key, we cannot hand it over, leak it, or rebuild your configuration. That is also why a configuration is shown once and must be downloaded before you leave the page.
Key generation needs a browser with X25519 in Web Crypto. If yours does not have it, the page says so plainly instead of falling back to something weaker.
What we do not claim
Two of our four connection types are proxies rather than tunnels. They use a per-device secret we issue, which lasts as long as your session and is deleted when it ends. That is a weaker arrangement than WireGuard's key, and we say so.