Hey, I believe there are several optimizations to be made but nothing major. Most of the time, when code is working in preview but not in live it’s because you have authorization issues on your data (data only readable/writable by admin most of the time)
EXCEPT what the point of having a secret code database if anyone can read or write it?
Most of your code regarding the management of the SecretCode collection should be done in the back and not readable nor writable by user directly.