
Every shuffle is generated from an unbiased HMAC-SHA256 byte stream keyed by the server seed and messaged with clientSeed:nonce:cursor. The server seed is committed as a SHA-256 hash before play; rotating reveals the original so you can independently reproduce every deal.
Paste any string to get its SHA-256. Verify a revealed server seed matches its committed hash from earlier rounds.