A fair chance, explained clearly.
Server-selected results
Real draws use cryptographic random selection on the server. The browser only displays the committed outcome, so every screen sees the same landing. The selected ticket, the pool snapshot hash and the prize allocation are stored together as the draw receipt.
What the receipt proves, and what it does not
The receipt and audit trail let you show entrants which ticket won and that the pool was fixed before the spin. They do not mathematically prove that a compromised server or a privileged operator could not interfere. MomentDraw does not claim an impossible-to-cheat or independently provably-fair protocol.
Private by default
Public views show masked names and ticket codes, never email addresses. Entrant contact details are encrypted at rest. Every organizer command checks the current workspace membership, and platform administration requires two-factor authentication.
Operations
Production runs on isolated infrastructure with encrypted daily database backups kept off the application server, five-minute health monitoring with owner alerts, and automatic rollback if a release fails its health check. Report a security concern to [email protected].