tl;dr They take the original JXcore binary and append your compressed source code (as base64 in a JSON structure).

I had at least hoped that (a) they didn't need the base64 overhead and (b) used uglify to minify/obfuscate the code.

tl;dr^2 It's nice for deploying JS apps, the 'Protected JavaScript Source' claim is bullshit.