As an afterthought, I can snoop in your code, even without "buying" if you have such a html5 js game, since I can just inspect the game and look at the sourcecode. So maybe be careful what information you put into that code. Small devs are sometimes targets of social scam attempts.