Lovely stuff. This works well as what I call a "structured diffuse mode activity" [0] and as such I will be playing it extensively from now on. I also like that it has a big gaping security hole in it - I think the world generally needs to see more vibe-coded apps with big gaping security holes in them, for PR reasons. (This is not a jab at OP btw! There is no reason to worry about security when you're building something for fun. Flash was famous for this as well.)
[0] https://ajmoon.com/posts/sdmas-why-you-should-be-playing-bro...