There's honestly not much to it... visuals are done in THREE.js ...your taps send a randomized session ID, steps, time and paw shape to the server, which powers the step count and leaderboard.
There's some basic bot detection that tries to flag the SUPER obvious bots to keep it feeling live. Don't worry, Big Paws is not trying to steal your data JFC relax twitter.