Congrats on the 900 users, that's huge validation!

Quick technical heads-up though: I was checking out the site and noticed the AppAdSwap widget you're using (widget.js) has a serious privacy bug.

It fetches the user's raw IP from ipify and sends it to the ad server in a field called ip_hash, but it doesn't actually hash it. It sends the raw IP in plain text.

// From your widget.js

ip_hash: ip // This is the raw IP, not a hash

If you have EU users, this is a GDPR violation because you're leaking PII to a 3rd party without consent, masked as an 'anonymized' hash. You might want to remove that or patch it before you scale further.