Thanks!

There are a few different ways to load the programs but none of those ways store anything on the server:
1. Using the "Open File": This one is solely local. The chosen file is read in by the Javascript running in the browser and the emulator runs it directly.
2. Drag and Drop: This is also solely local. The file you drop onto JOric is processed by the Javascript running in the browser and the emulator runs it directly.
3. The use of the "?url=" request parameter: This does involve the server, but only for the purposes of working around the CORS security checks. When client side Javascript fetches a program from a URL, it usually needs to be from the same website that the Javascript came from. So I have a small script running on the server that the fetch of the program is proxied through. This meets the CORS requirement. Nothing it actually stored on the server though. The program comes from the external website, e.g. oric.org, every time.
4. The game selection pages: This is similar to #3. It's just a convenience mechanism really, where those pages are kind of like bookmarks of games that are then fetched from external websites via the same CORS proxy script. The majority are fetched from oric.org, some from the defence-force.org website, and a few others.
In summary, no games are stored on the server. I wanted to avoid that and instead fetch from existing popular Oric websites.