It sends an encrypted event to relays for tagr which can decrypt it with its nsec. It’s the same way encrypted dms work but just a different event type.