Provably fair
Every roll is HMAC-SHA256(server_seed, "client_seed:nonce:round:cursor") — the first four bytes divided by 2^32 give a float in [0,1). That float picks the wear, and the same deterministic stream picks the item by cumulative case weights. We publish the hash of the server seed before you play and reveal the seed when you rotate.
server seed hidden until rotationclient seed is yoursnonce increments per rollverify any roll below →
Your seed pair
Log in to see your private seed pair and nonce counter.
Verifier
Server seed
Client seed
Nonce
Round
Your last rolls
No rolls yet.
Note: this demo build keeps the seed pipeline identical to production (hash committed before play, seed revealed on rotation, client seed user-editable) but runs on a single SQLite instance, so the server seed is only as private as the server itself.