Random Comment Picker

The tool uses PHP's random_int() — a cryptographically secure random number generator — for selection without replacement. All filtering happens server-side on the retrieved comment set. The draw record includes timestamp, platform, retrieval limits, all filter settings, eligible count, and selected indices for auditability. However, it cannot verify platform-level requirements like follows, likes, shares, or subscriptions unless the API explicitly provides that data.

Facebook and Instagram's Graph APIs require authentication with specific permissions (pages_read_engagement for Facebook, instagram_graph_user_media for Instagram). Only comments on posts/media you own or manage can be accessed. YouTube uses a public API key and does not require OAuth for comment retrieval. This is a platform restriction, not a limitation of this tool.

No. The tool only accesses comments available through the official APIs. YouTube: only public videos with comments enabled. Facebook/Instagram: only posts/media on Pages/accounts you manage or have been granted access to. Private, unlisted, or restricted content cannot be accessed. The tool never scrapes or bypasses authentication.

Comments are stored temporarily on the server only for the duration of the draw (maximum 7 days). No API keys, access tokens, or secrets are ever logged or stored in the database. Comment text is not permanently stored — only the draw result record (winners, settings, metadata) is kept. You can request deletion of your data at any time via the Contact page.

Yes. YouTube Data API v3: 10,000 quota units/day (each comment thread list costs ~1 unit, max 100 comments per page). Facebook Graph API: rate limits vary by app verification level; Page access tokens with pages_read_engagement required. Instagram Graph API: Professional (Business/Creator) accounts only, connected to a Facebook Page. The tool caps retrieval at 2,000 comments per draw to stay within reasonable limits.

No. The tool only retrieves comment text and basic metadata (author, timestamp, like count on the comment itself). It cannot verify whether a user liked the video, followed the account, shared the post, or met any other contest requirement unless the platform's API explicitly provides that data in the comment response — which they typically do not.