Love this pattern. I used the same trick for the async duel mode in a mobile game I made: the whole duel state travels inside the URL, no server at all. Besides being free to host, it means there is literally nothing to leak. "The URL is the app" deserves to be a design philosophy...