What this tool does with data

You paste a link to a public Instagram, TikTok, YouTube or Facebook post, or a list of names. The comments on the post are read, the draw runs in your browser, and nothing about you is kept afterwards. There is no account, no cookie, no database, and nothing is stored in your browser.

The link you paste, and nothing else you type. It goes to this site’s own server, which uses it to look up the post. A list of names pasted into the random picker does not leave your browser at all: the draw is run on it right there.

One other request is worth knowing about, because it does not go to this site at all: once a post loads, your browser fetches that post’s thumbnail straight from the network’s own image servers: Instagram’s, TikTok’s, YouTube’s or Facebook’s. That network sees the request the way it would see you opening the post, which includes your IP address. Nothing is sent with it that identifies this site’s visitors, and it happens only after you paste a link.

It asks a comment provider for the public comments on that post: RocketAPI for Instagram, and ScrapeCreators for TikTok, YouTube and Facebook. What goes to the provider is the post’s own identifier or link, and this site’s API key. Nothing about you goes with it: not your IP address, not your browser, not the fact that you were the one who asked.

Only what the network already shows publicly is read. No password is ever asked for, and no social media account is ever connected.

Two things, both in the server’s memory, both short lived, and neither written to a database, because there is no database.

• The comments on a post, for five minutes. Asking for the same post twice in a row would otherwise cost a second lookup at the provider. At most 200 posts are held this way, and the oldest is dropped to make room.
• Your IP address, for one minute. It is used to count requests, so that one visitor cannot run hundreds of draws a minute. Only the times of recent requests are held against it, it is never attached to a draw or a result, and it is dropped once the minute has passed.

Both live in memory alone and are gone when the server restarts. Separately from the application, this site is served through Cloudflare and runs on a rented server, and both keep the ordinary request logs that any web server keeps.

In your browser. Once the comments have loaded, filtering them against your rules and choosing the winners is all done on your own machine, which is why changing a rule and drawing again is instant and never asks the server for anything.

Cloudflare Web Analytics runs on this page. It counts page views without setting a cookie and without following anyone between sites. There is no other analytics, no advertising script, and no social network embed. The two typefaces are served from this site rather than fetched from a font service.

• Ask for the password to any social media account, or connect to one.
• Read anything that is not already public on the post.
• Set a cookie, or store anything in your browser.
• Sell, share or publish anything it reads.

This site is not affiliated with, endorsed by, or sponsored by Instagram, Facebook, Meta Platforms, Inc., TikTok, YouTube or Google.