Every path is random.
The shape never is.

A Galton board under the page. Every peg is a coin flip you can verify, and the pile still comes out a bell curve.

Hover to trace · hold to pour Drag to trace · hold to pour

The board p = 0.50

Balls dropped 0

Went right –

P(right) at each peg 0.50

Outline	Error
Normal
Poisson

Provably fair

Each ball's flips come from HMAC-SHA256 of a server seed (committed by its hash up front), your client seed and the ball's nonce.

Following ball

Recomputes a ball from its seeds with the same code the board uses. To check without trusting this page, run the snippet below with Node.

Server seed Client seed

Nonce p Rows

verify.mjs