Secretsantasorted

No accounts, no mailbox, no server list.

The organiser's tab does the shuffle. A private link is not encrypted with a password; the assignment is encoded in the link. Anyone with the link can read it, so send it only to that person, the way you would hand over a folded slip.