Is my traffic encrypted?

Yes. All traffic to your PCS is encrypted with HTTPS (TLS). The level of end-to-end encryption depends on which address you use.

Address	Encryption
sslip.io	True end-to-end — single TLS session to your PCS
nsl.sh subdomain	Encrypted in transit — re-terminated at the NSL.SH edge
Custom domain (Cloudflare)	Encrypted in transit — terminated at Cloudflare's edge

For maximum privacy, use your sslip.io address. For convenience, use the nsl.sh subdomain.

For the full breakdown, see TLS & Privacy.