🎲 Provably fair

Before you pull, the game commits to a secret server seed by showing you its SHA-256 hash. You can also set your own client seed. Each pull is numbered (the nonce), and every random number in it is

HMAC-SHA256(key = server seed, message = "client seed:nonce:i") → first 13 hex digits ÷ 2⁵² → a number from 0 to 1

When you reveal a seed, its hash can be checked and every pull made with it can be re-run with the recipe below, right here in your browser. The game can't change a seed after showing its hash, and it can't know your client seed in advance.

The recipe for a pack of n cards

1. Numbers 0 to n−1: each card's rarity, weighted by the pack's odds. The last card can't be below the pack's guarantee (pity raises it to Legendary).
2. Numbers n to 2n−1: which card of that rarity: position ⌊number × size⌋ in the series' unsealed standard cards of that rarity, in collector-number order.
3. Numbers 2n to 2n+5: two per limited tier (Sovereign, Heirloom, Crowned, rarest first). A tier hits when its first number is below the drop rate; its second picks which available card. The first hit replaces the first card. Limited editions you already own, or that are sold out or unreleased, aren't available.
4. Numbers 2n+6 to 3n+5: each card's foil. Starting from Star Holo and working down, the first tier whose chance (times any foil boost) is above the number wins; each tier's chance is taken off the number before checking the next.
5. Numbers 3n+6 to 4n+5: each card's Dark Holo: below the Dark Holo chance (times any boost).

A Foil Reforge uses number 0 (it succeeds when the number is at or above the failure chance) and number 1 (Dark Holo, on a success). A reforge guaranteed with gems is logged with a failure chance of 0, so it always succeeds. Every pull always uses all its numbers, so one outcome never shifts another. Everything else a pull depends on (its odds, pity, boosts running at the time, the limited editions available to you, the day and time (a card counts once its release day or time has come), and the number of cards in the catalog) is recorded with the pull and shown to the verifier.

Your seeds

Verify a seed

Actual results against the odds