Site is clean, documentation is simple and everything seemed to work great. Thanks for sharing. The only issue I see: I can sign up using my own referral code seemingly unlimited times with fake emails, and I don't even need to do this on a real domain... the JS code works from a local HTML file [0]. So people that want to bump their place in line, or competitors wanting to cost me money/headache, can seemingly sign up dozens of fake referrals per second. I assume nefarious use was not on the high priority list before launch, but do you have any plans to mitigate this type of activity in the future? Perhaps rate limiting and IP / browser session checks on the server side to start?
[0] https://docs.referlist.co/#/?id=install-embedded-sign-up-for...