Privacy, concretely

Short version: your names and draw never leave your browser. We measure aggregate page traffic and nothing else.

The details

• The draw is local. Matching, receipt hashing, and link generation all run in your browser (JavaScript, auditable in the page source).
• Links use the URL fragment (the #… part). Browsers never transmit fragments to the server, so the pairing inside a link is invisible to our logs.
• Obfuscated is not encrypted. Anyone holding a link can decode that one pairing. Share links over channels you trust.
• Analytics. Google Analytics 4 (G-T414B9YV9T) counts pageviews in aggregate with _ga cookies. No name, email, or link content is ever sent to it. Browser opt-out · Google privacy policy.

See also: no email and retention.