Thanks! Front-end: Vite + React + React-Leaflet for the map UI. Data: Curated spots are just a local JSON array; user-added spots go to Firebase Realtime DB (so no Supabase in this case but that's probably better longer term). Hosting: the static Vite build is served from a tiny Node/Express wrapper on Heroku. Because Firebase handles the write endpoint, I get SSL, auth options, and rate-limiting for free.

Right now anyone can add a place without an account; the “abuse protection” is: Very small audience (for now) Firebase security rules (lat/long bounds, char limits) Manual moderation—if something looks off, it’s a single click to delete in the console. If the map gets popular I’ll add reCAPTCHA or gated auth.

Cool to see people adding stuff around the world!

Anything you wish it could do?