they use a proxy. Not just the url's you are viewing, but all the data on the page. They have these fancy proxies that generate ssl certs on the fly and just play the man-in-the-middle. They configure your browser to accept their homegrown certificate authority and then they generate their own certs for your session and they handle the true connection on the other side of the proxy. Nothing you do is private.