In-browser randomness. Not cryptographically secure — fine for games, not for lotteries.