diff --git a/web/index.html b/web/index.html
index b53a623..b9e580b 100644
--- a/web/index.html
+++ b/web/index.html
@@ -2,8 +2,25 @@
 <html>
 <head>
   <title>Hauberk</title>
-  <link href='http://fonts.googleapis.com/css?family=Buenard' rel='stylesheet' type='text/css'>
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self'; font-src 'self'">
+  <!-- FredyGames: every game on the site shares one localStorage; Hauberk keeps its keys under "hauberk:". -->
+  <script>
+    (function () {
+      var p = 'hauberk:', s = Storage.prototype, g = s.getItem, w = s.setItem, r = s.removeItem;
+      s.getItem = function (k) { return g.call(this, p + k); };
+      s.setItem = function (k, v) { return w.call(this, p + k, v); };
+      s.removeItem = function (k) { return r.call(this, p + k); };
+    })();
+  </script>
   <style>
+    /* FredyGames: Buenard (SIL OFL 1.1, from google/fonts) is served from fonts/ instead of fonts.googleapis.com. */
+    @font-face {
+      font-family: 'Buenard';
+      font-weight: 100 900;
+      font-style: normal;
+      font-display: swap;
+      src: url('fonts/Buenard-wght.ttf') format('truetype');
+    }
     body {
       background: #000;
       color: #ccc;
diff --git a/web/main.dart b/web/main.dart
index c4a5693..41f9888 100644
--- a/web/main.dart
+++ b/web/main.dart
@@ -51,7 +51,8 @@ void main() {
 
   // Load the user's font preference, if any.
   var fontName = web.window.localStorage.getItem("font");
-  _font = _fonts[1];
+  // FredyGames: start with 8x10 (the 6x9 original is tiny in the player frame of this site).
+  _font = _fonts[3];
   for (var thisFont in _fonts) {
     if (thisFont.name == fontName) {
       _font = thisFont;