Provably fair

Every outcome is sealed before you open a box, and you can re-compute it yourself afterwards. The house cannot change a result after the fact.

How it works

• We generate a secret server seed and publish its SHA-256 hash to you up front (the commitment).
• Your client seed — which you can set yourself — is combined with the server seed and an incrementing nonce.
• The result is HMAC-SHA256(serverSeed, "clientSeed:nonce"), mapped to the box's published item weights.

Verify it yourself

Open My profile → Provably fair to view your active server-seed hash and client seed, set your own client seed, and rotate & reveal — rotating reveals the previous server seed so you can recompute every past open made under it. Each open also has a public receipt at /fair/<id>.