It appears to send all mouse movements and timing to the server for verification. Regardless, their database of games will never be large enough to disuade spam

It appears to send all mouse movements and timing to the server for verification. Regardless, their database of games will never be large enough to disuade spammers if this becomes popular. It will work in the short term, but I don't see how they can make this work long term, especially with no clear route to monetization.