I don't think there's anything wrong with storing the game state on the server, but you should use a session cookie rather than making it based on IP.