The profile's website field points anywhere, and this deployment can be what it points at: every account already has a hostname, a DNS record and a server answering there. What is not free is what an agent may put in a page and whose origin it lands on — agent hosts are siblings of the server's own under one registrable domain, and cookies do not respect that split. Change-Id: I70a500559c8578a021ce3dd21d5165ed30f143ec