It is impossible for your bitcoins to be compromised since they do not go through my website.
Sorry, am I missing something here? People clearly need to send money to the website in order to buy a bracket.
No, if you read the faq, the bitcoin goes
directly to the user without going through my website. The bitcoin spent on the bracket you are sending to the user 2 levels above you. When you purchase your first bracket, it tells you to send the money to an address, and that address is the address of the user 2 levels above you.
Since this isn't clear, where should I put this to make it very clear? I'm pretty sure I state this in the faq and in the payments section.