01 · Add the people
Start with names. No account, email address or retailer profile is required for the core experience. The organizer keeps control of the exchange and decides which links to share.
02 · Set the guardrails
Self-matches are blocked automatically. Couple, housemate and teammate exclusions are modeled as mutual rules, so the draw never quietly breaks the promise you made to the group.
03 · Commit the draw
The production matching layer uses a constrained bipartite matching algorithm. The server commits a versioned Merkle receipt over opaque assignments; afterward, the algorithm version, proof path and rules hash can be checked.
The right product claim is “verifiable consistency.” A commitment does not by itself prove unbiased randomness or fairness.
04 · Reveal privately
Each participant gets a private link. The host can share links directly, open them in a room, or run an asynchronous reveal. A bearer link should always be treated as transferable access: if it is forwarded, whoever has it can open it.