it immediately asks for a private key - this should be updated ASAP to use NIP-07 logins (eg browser extension)

don't ever put your private key in a web app!

EDIT: this page gives some context. Good luck to the team.. They should add a nostr profile with NIP-46 so we can zap them directly!