A private draw you can understand.
We do not ask you to trust a black box. Here is what happens from entering the group to opening a participant’s private result.
Privacy by design
No participant accounts, email addresses or phone numbers.
Everyone gives once and receives once. Nobody draws themselves.
The organizer panel and every participant use separate, hard-to-guess addresses.
The result is saved only when the whole group fits.
The mechanism searches for a complete one-to-one assignment while respecting every exclusion selected by the organizer.
- 01
Validate the group
Names must be unique, the group must contain at least two people, and exclusions may only refer to existing participants.
- 02
Find valid receivers
For each giver, the system removes the giver and both directions of every excluded pair from the available choices.
- 03
Build a complete matching
Every participant receives one distinct recipient. If an early choice blocks another person, the mechanism revisits the assignment instead of accepting an incomplete result.
- 04
Save all or nothing
Pairs are written in one database transaction. An impossible setup produces an explanation and leaves no partial draw behind.
Every role sees only what it needs.
A password-protected panel
The password is stored as a secure hash, not readable text. Re-entering a remembered organizer link still requires authentication.
One private result
A unique random address reveals only that participant’s recipient and the tools shared within the same draw.
An expiry chosen up front
Access lasts from 1 to 180 days. Expired draws become unavailable and enter the deletion process.
