Privacy Policy

The site may store recent tools, scenario presets, experiment assignments, tab choices, and similar UX preferences in your browser using local storage or session storage.

This local browser storage helps the tools reopen faster and keep your current setup on the same device. It is not intended as a permanent backup.

The site uses Umami analytics on approved project domains to measure aggregate usage patterns such as page opens, clicks, and draw flow events.

Analytics are used to improve page quality and understand which tools are being used most often. Analytics settings may change over time as the project evolves.

Paid-intent measurement uses a random browser-session ID with an absolute 30-minute lifetime, a random result-state ID created after a local draw, and a deterministic event deduplication key. These fields are stored in local storage to suppress repeat eligible, view, and click events across same-browser tabs. They do not contain the participant list, winner name, email address, or draw seed.

The site includes project-level AdSense verification and an ads.txt file so the domain can be reviewed for Google advertising eligibility. Ads may not appear on every page, and the core tools should remain usable without an account.

The site code does not intentionally serialize tool inputs or results to AdSense. Google advertising code executes in the page context, however, and may process cookies, device and browser details, broad location, consent choices, and page-context signals.

If Google ads are shown, Google and its partners may use cookies or similar technologies for ad serving, fraud prevention, frequency capping, reporting, and measurement. Google explains these advertising cookies and controls at Google advertising privacy and terms.

You can control cookies in your browser and manage Google ad personalization through Google account settings where available. Some advertising may still be based on page context, browser type, broad location, or other non-personalized signals.

Some tools can encode draw state, inputs, settings, or results into a share link so the same state can be reopened later. If you create or send a share link, treat it as information you are intentionally sharing.

When optional link shortening is configured by the site operator, the long URL may be sent to that configured shortlink endpoint in order to generate a shorter link. The tools do not send share links to a public shortening provider by default.

Random Pick Tools does not require a user account to run the core tools and does not collect card details through the site.

When Verified Draw purchasing is enabled, checkout opens on Waffo Pancake, the merchant of record. Waffo Pancake processes the buyer's payment and order details, and provides the operator with order and refund records. Its own privacy terms apply to that hosted checkout. Random Pick Tools stores the order reference, purchase/refund status, access-token hashes, draw-slot state, and public receipt for fulfillment, recovery, fraud handling, and support. Before checkout, the buyer's browser creates a high-entropy recovery key. Random Pick Tools receives that key over HTTPS only to compute and store a domain-separated SHA-256 hash; the plaintext key is kept in the buyer's session storage and downloaded or copied recovery kit, is not persisted in the Verified Draw database or encrypted backup, and is not sent to Waffo. Random Pick Tools does not persist the buyer's email address in its Verified Draw database.

Verified Draw participant names stay in the buyer's browser. Execution sends only the SHA-256 list hash, participant count, and winner count; the service returns winner indices. Public receipts and encrypted backups contain no participant names. Public receipts are retained for at least 12 months. The Verified Draw, checkout-confirmation, and verifier routes do not load project analytics or advertising scripts.

A recovery request sends the saved checkout reference and recovery key to Random Pick Tools over HTTPS. The service verifies the stored hash, checks Waffo's current paid and refund state, and rotates the browser access cookie. It stores the last successful recovery time and a secret-salted hourly network quota hash, not the raw IP address. Paid recovery-key hashes are included in the encrypted R2 backup so a database restore does not strand buyers.

During the public no-charge review checkout, Cloudflare Turnstile processes browser, device, and network signals to distinguish people from automated abuse. The service uses the Cloudflare-provided IP address only to compute a secret-salted daily quota hash; it does not store the raw IP address. Unused test checkout sessions expire, and quota counters older than two days are deleted automatically.

Optional template cloud sync, when configured by the site operator, uses a lightweight account identifier entered by the user. Do not use a sensitive password as that identifier.

Many inputs, results, and templates stay in your browser unless you intentionally copy, download, share, or sync them through an optional configured endpoint. Treat classroom rosters, participant lists, and gift assignments as private information.

If a share URL encodes names, rules, or result state, anyone with that URL may be able to reopen the same content. Review the link before posting it in public.

Depending on the law that applies to you, you may ask us to confirm whether we hold your personal data, access or receive a copy of it, correct inaccurate or incomplete personal data, or delete personal data under certain conditions. You may also have rights to restrict or object to processing, receive portable data, withdraw consent, and complain to your local data-protection authority.

To exercise a right, email cenfeng8023@gmail.com with the subject “Privacy request.” Include enough information to identify the relevant interaction, such as a Waffo order or public receipt ID, but do not send card details or participant names. We may verify your identity before disclosing, correcting, or deleting data. We aim to respond within 30 calendar days, or within the period required by applicable law.

You can remove browser-only preferences and saved tool state at any time by clearing this site's storage in your browser. A deletion request may not remove records we must keep for legal, tax, accounting, fraud, or dispute purposes. A public Verified Draw receipt may remain available for at least 12 months to preserve verification integrity; it contains hashes and indices, not participant names.

Waffo Pancake independently controls payment, billing, tax, fraud, and refund data it collects as merchant of record. Requests about that data should also be directed to Waffo through the rights channel in its Privacy Policy.

For privacy questions or a private data request, email cenfeng8023@gmail.com. For non-private project feedback, use the support details on the Contact page.