The privacy policy concerns me a bit. It's clearly copy/pasted from somewhere else (still has `[name]` and `[website]` placeholders) which means the author really hasn't given much thought into privacy, or perhaps they're not being entirely truthful.

Is the data being sold? What security measures have you taken? You're tying email addresses to physical locations, this is a goldmine of information for all sorts of actors.