Takes about two minutes. Winners are drawn about one minute after you lock the list.
The list is never published as plain text: each entry becomes a salted fingerprint. After the draw, anyone who already knows a handle can check whether it was in. Winners are shown by name, with email addresses masked.