This is the exact dilemma I’m facing. Did you ever find a good solution?
I know there’s a way to “domain lock” your game, which would help prevent it from playing in someone else’s website. However, since it’s an embed game, you must include the Netlify url on the allow list, thus making that security check useless.
I don’t know how to domain lock an embed game to the Wix address, not just the Netlify url. Netlify is so easy because I can just drag and drop the .zip file of the game and it spits out a url. I don’t know how to do that directly onto the Wix site (and thus avoid using Netlify at all). Doesn’t seem possible, but looking to any and all possible solutions.
I don’t even care so much about losing sales, but my game is fairly large and if it’s stolen and uploaded in other places and too many people access it, I could exceed my Netlify bandwidth and end up PAYING for others to play it for free.
This is more of a Netlify question since your netlify site is where you can control what sites are able to embed your netlify-based game.
You’ll want to set your Content Security Policy on Netlify to only allow certain sites to do the embedding.
These resources might help point you in the right direction. First link is about where to set a CSP on Netlify, the other is exactly what you’ll need to set.