Using Hatpull at work or school
Hatpull is a free name picker and gift-exchange organizer from Teregna LLC. It requires a modern browser with JavaScript enabled. No browser extension or software installation is needed.
If a page will not open
Ask your IT team to review the block message and the addresses below. An organization may restrict new websites or particular categories. Access is subject to its policies; this guide does not change those policies.
If the page opens but an invitation, celebration or sign-in does not load, the data service may be unavailable or blocked. A certificate warning should be investigated by IT before you continue.
Google sign-in is optional. If your organization restricts Google accounts, use the email sign-in option when permitted. You can use the name picker without signing in.
For your IT team
Review outbound HTTPS on TCP port 443 for the exact hostnames needed below. Website scripts, styles and fonts are served from the website's own domain. The picker runs locally in the browser and saves its names in that browser.
| Hostname | Purpose |
|---|---|
onlinenamepickertool.com | Name picker, including its scripts and fonts. |
secretsantageneratorapp.com | Secret Santa, invitations, wish lists, and account pages. |
rkpglmwjpwbrxbluvsqm.supabase.co | Required for Secret Santa data and authentication. Not required for the local picker to spin. |
accounts.google.com | Optional Google sign-in, subject to your organization's identity policy. |
www.onlinenamepickertool.comwww.secretsantageneratorapp.com | Redirects to the corresponding address without www. |
drawnamesonlinetool.com | Optional legacy address that redirects to the Secret Santa site. |
Use hostname rules, not fixed IP addresses or a wildcard for all of Vercel or Supabase. The hosting addresses can change. Secret Santa updates use HTTPS polling; they do not require a WebSocket exception.
Authentication emails and reminders come from reminders@send.secretsantageneratorapp.com. Review mail filtering separately if a requested sign-in email is missing. Fonts no longer require Google Fonts access. Analytics are optional for site functionality.
Verify access
- Open the name picker, enter fictional names, and complete a spin.
- Open Secret Santa, create an approved test exchange and open its invitation.
- If accounts are needed, test the permitted sign-in method and reopen the exchange.
When requesting help, share the hostname, time, browser, and the block message or category. Remove invitation codes, personal links and sign-in codes before sharing screenshots or logs.
Questions: hello@secretsantageneratorapp.com. See our privacy policy and setup guide for how the service works.