Each draw mixes three sources of entropy: your browser's cryptographically seeded random generator, the current timestamp down to the millisecond, and (when available) your public IP address with the dots removed. The IP and timestamp make every seed unique to this moment and this connection; the browser's own randomness keeps the result unpredictable even to someone who knew both.