The short version

There are no accounts, no sign-up, and nothing here that identifies you personally. The generators run in your browser: what you generate never reaches us. There are exactly three exceptions — the protected draw, reviews and the contact form — and each one is described separately below.

The site is funded entirely by Google AdSense. Google sets its own cookies, and that is the one place where a third party can track you here. How to turn that off is covered in the advertising section.

What stays in your browser only

Everything below is stored on your device. It is never sent anywhere, we cannot see it and we cannot read it. Clearing site data in your browser settings removes it for good.

Draw history. The results you have generated, with the time and the range, so you can come back to yesterday's number.
Session statistics. The numbers of the current session that feed the histogram, the average and the spread. They are computed on the fly and disappear when you press Reset session.
Preferences. Your theme, your language, and the state of the animation, sound and speech switches.

What reaches the server

The server receives data only when you deliberately do one of three things.

The protected draw. With that switch on, the server picks and signs the result — otherwise the proof would mean nothing. We store the result itself, the range bounds or the number of entries, the time of the draw, the page language and a cryptographic signature. The list of names is not stored: only an irreversible fingerprint of it, from which the names cannot be recovered. The winners and reserves, however, are stored and shown on the proof page to anyone holding the link. That is the whole point of such a link, but keep it in mind when you paste real names into the list.

Reviews. We store the rating, the text and the name if you gave one. The name is optional and any name will do. So that the same rating cannot be cast a hundred times, we store an irreversible hash of your IP address — the address itself is not kept, and the hash cannot be turned back into it.

The contact form. We store the message, the topic, the page you wrote from, the interface language and your email address if you left one. The address is used to reply and for nothing else: we run no mailing list.

We also count anonymous statistics on range popularity — how often people picked one to a hundred, one to six and so on. Such a record holds two numbers and a language code, no identifiers at all. It is how we decide which ranges deserve their own page.

Finally, like any site, we leave a trail in the web server logs at our hosting provider: IP address, request time, page address and browser string. These logs exist to fend off attacks and are rotated automatically.

Advertising and cookies

This site is free and lives on income from Google AdSense units. Google and its partners use cookies to serve ads, count impressions and cap how often you see the same banner. Google may use these cookies to personalise ads based on your prior visits to this and other sites.

We have no access to that data and cannot connect it to anything on our side. Ad settings are controlled by Google, not by us:

Turn personalisation off at adssettings.google.com.
How Google uses data from partner sites is explained at policies.google.com/technologies/partner-sites.
Opt-out options for other vendors are collected at youronlinechoices.com.

Visitors from the European Economic Area, the United Kingdom and Switzerland are shown a consent dialog before any personalised advertising. Declining does not lock you out: the generators work the same with ads and without them, the ads simply stop being personalised.

Analytics

We look at anonymous traffic statistics to understand which generators people actually need and which pages should be rewritten. Nothing in them identifies an individual: we see page visits, language and an approximate country, never the numbers you generated.

How long we keep things

Protected draw records are kept indefinitely: a proof link has to still open a year later or it is worthless. Reviews are kept while published. Contact messages are deleted once the question is closed. Range statistics are anonymous from the start and are kept indefinitely.

Your rights

You can ask to see what is stored about you, to correct it or to delete it. In practice that means three things: your review, your message and a draw record. Write through the contact page and say which one: for a draw, the code from the proof link; for a review, the date and the text. We reply within one month.

Anything held in your browser you remove yourself — with the Clear button next to the history, or by clearing site data in your browser. We are not involved in that.

Children

This site is not directed at children under thirteen and does not knowingly collect their data. If you believe a child has left data here, write to us and we will remove it.

Changes

When we change this document we update the date at the foot of the page. Substantial changes — a new way of processing data, for instance — are described here in plain words, rather than hidden behind a general remark that the policy may have changed.

Privacy Policy