Is FairPicker actually fair?
We sat down with the team, mapped every way a giveaway can be rigged, and closed each one structurally — not by promise, by mathematics.
Deep Dive 1 · No Re-Draw
One Draw Per URL · No Re-Rolls
Every event URL can be drawn exactly once. The DB enforces it, so a host can't keep rolling until they get the winner they want.
🔒
URL is the lock
A DB UNIQUE constraint on source_url means the same event link cannot be drawn twice. Period.
🛡️
No silent re-rolls
Drawing repeatedly until a preferred winner appears — the most common rigging pattern — is impossible at the platform level.
👁️
Public proof
The integrity certificate lets anyone confirm that this draw was the only draw for this URL.
⚖️
Equal odds
Every participant gets the same probability of winning. The math doesn't favor anyone — and the math is published.
Deep Dive 2 · Provably Fair
Tamper-Proof by Design (Provably Fair)
Neither the host nor a server admin can predict or change the result. SHA-256 hashing combined with a host-supplied Client Seed makes the draw mathematically reproducible — anyone can replay it from the published values.
🔑
Client Seed
Supplied by the host before the draw runs. Without it, the server has no way to predict the result on its own.
⏱️
Server Timestamp
Recorded at draw time with nanosecond precision (1/100,000,000 second). Even drawing one moment later produces a completely different result.
#️⃣
SHA-256 Hash
The same cryptographic hash function used in Bitcoin. Change a single character of input and the output is unrecognizable.
Deep Dive 3 · Zero PII
Zero PII · Personal Data Never Stored
Uploaded data is de-identified inside the user's browser before it ever reaches the server. The raw spreadsheet never leaves the device.
Upload
Excel / CSV (loaded locally)
Pick fields
Choose columns to mask
Mask in-browser
Names hashed before upload
Server stores
Only masked data leaves device
Masking examples
Use Cases
Where FairPicker fits
From audit-ready certificates for government raffles to creator giveaways on Instagram and YouTube — every draw ships with a verifiable proof.
Government & municipal raffles
When the audience is taxpayers or staff, an auditable certificate isn't optional. Private result links plus a SHA-256 proof close out every complaint and every audit in one pass.
Instagram giveaways
Pull commenters via the official Meta API and ship the result as a 4:5 social image you can drop straight into a story or feed post — proof included.
YouTube comment giveaways
Collect up to ~50,000 commenters through the YouTube Data API. Even massive subscriber celebrations stay well under a small per-draw fee.
Community board giveaways
The bookmarklet auto-scrapes comments from major Korean forums (MLBPark, FM Korea, Theqoo, Clien, Ppomppu, and more). No manual copy-pasting.
E-commerce raffles
Upload your buyer list as CSV or Excel. In-browser masking plus a white-label certificate with your logo turns a draw into a trust signal for your store.
Creator & community draws
Discord, Twitch, newsletter giveaways — anywhere you have a participant list, FairPicker turns it into a verifiable raffle in under a minute.
Certificate Samples
Sample Integrity Certificate
This is what every real certificate looks like. Free draws are kept for 90 days; paid draws stay accessible for at least a year.
FAQ
Frequently Asked Questions
We have answers to your questions.
Can the host really not rig the winner?
Can I get a refund after paying?
How is participant data protected?
Can I run a private giveaway?
Which platforms can I draw from?
Run a provably fair draw in the next 60 seconds
Free for up to 300 entries. No sign-up needed.
🚀 Start a Free Draw