Hi there, it's plain HTML with the basket living in the URL. Checkout and contact form are POST. There's a small Go backend (pledge/unveil) which saves the orders as encrypted json files (public key) with no private key stored on the server, then a program on my laptop which SSHes in to the VPS to collect the orders and delete the orders on the server multiple times a day - it's a passion project away from our bigger shop to try creating something more secure and private than wordpress/woo.

It intentionally runs like a guest order website, I think the only people so far who've really used it are the privacy geeks who also like mushroom spores and cultivation - niche clientele (but my kind of people).

Depending on how well this project goes, it's only a few days old - but it's taking orders, I'm hoping to move our main shop to a similar setup and running it from home because WP/Woo and even linux servers (I tend to use Debian) are giving me a lot of anxiety with the security situation. I fear that I worry about our customers data than even they do!