Provably fair

Every rip is decided before you click, by a server seed we commit to in advance. This page replays any pack entirely in your browser — nothing here is sent back to us.

The algorithm

commitment  = SHA256(serverSeed)                  // published before your first rip
rarityRoll  = HMAC_SHA256(serverSeed, clientSeed:nonce:i)
indexRoll   = HMAC_SHA256(serverSeed, clientSeed:nonce:i+1000)
float(h)    = parseInt(h[0..8], 16) / 0xffffffff   // -> [0, 1)

rarity = weighted pick over published rates using float(rarityRoll)
card   = tier[ floor(float(indexRoll) * tier.length) % tier.length ]

The HMAC key is the server seed as an ASCII hex string, and i is the card slot, 0-indexed. Rotate your seed on the Portfolio page to reveal the server seed for every rip you already made.

Paste a revealed seed pair to reproduce the exact cards that pack contained.