I would put both reading and writing behind one highly restrictive layer, say an HTTP server, which would expose two endpoints: “get random mansion” and “upload mansion”. The latter would also authenticate the user through Itch’s API.
Letting random anonymous people upload mansions is a one-way ticket to getting your server/database shutdown.