For the security of your visitors, would you please set up TLS?
It's trivial with LetsEncypt and an ACME client. If you're on a webhost, most of them make it a one-click operation. If it's a legacy/retro webserver, you can put something like caddy in front of it and caddy will do everything for you. Or use Cloudlfare. Etc. etc.
Are you worried about your ISP injecting ads, or ...?
Overhead on maintaining this stuff is not free (close to free tho it may be in best case scenarios) -- if there is no private user data being submitted, I've never begrudged someone for running their machine as they see fit.
and a bunch of games written in the past 5 years http://www.deater.net/weave/vmwprod/demakes/
more info on finding the vblank w/o an interrupt using the floating bus, sometimes called "vapor lock" http://www.deater.net/weave/vmwprod/megademo/vapor_lock.html
all of these have full source code available