Any chance of spinning up an HTTPS version of the site? This would encrypted sensitive information: U/P login, URL payload/querystring, form post data etc. from prying eyes (even if it is just user's ISP). I know there are plenty of free SSL certificate providers out there, but unsure if this site's hosting provider would charge extra to host the SSL version of the site.
The answer is YES. I will have it setup shortly. And YES they charge extra for it. Seems as if I have to start to implement some level of income/donation scheme etc. pretty soon.....;-)
You could potentially rent a server on digital ocean or amazon cloud. You'd be able to install and start services yourself with no extra charge. Just an idea.
Let's encrypt.org , do free SSL certs they are trusted by all browsers, and have financial backing of all the internet giants (Cisco,mozilla,Facebook. To name a few)