diff --git a/.env.example b/.env.example
index 01b011d..190d421 100644
--- a/.env.example
+++ b/.env.example
@@ -2,6 +2,7 @@
 HTTP_HOST=localhost
 HTTP_PORT=9283
 # Allowed origins for POST requests; needed for web games; if empty or missing, defaults to '*'
+# Note well: games played from itch in a new window actually send all requests from https://html-classic.itch.zone (the game is hosted in an iframe)
 HTTP_POST_ALLOWED_ORIGINS=https://your.domain.com
 # Database connection settings
 DATABASE_NAME=game_logger