01What it is

Sotto runs a secret santa with your friends: no accounts, no app to install, and nobody, not even the organiser, can see who drew whom.

02The problem

A secret santa only works if the draw stays secret, from everyone, including the person running it.

03How it works

The draw runs on the server only, using Sattolo's algorithm with crypto.randomInt, so every result is valid and nobody draws themselves. Each reveal is gated by a PIN that is stored bcrypt-hashed. There are no accounts at all, so there is no identity to leak, and the organiser cannot view the assignments because no query at the database layer exposes them. A strict content security policy and rate limiting sit in front of it.

04The moment

The reveal is the one deliberate piece of theatre: a single burn with ember particles, and the name is gone ten seconds later.

05Where it is now

Live at sottogames.com, launched on Product Hunt in May 2026. Built with Next.js 16, strict TypeScript and Supabase, Postgres with row-level security.