We do have automated hotlink prevention but it might take a moment to kick in. I just went and made sure your HTML5 projects have been processed for it, so traffic should now be redirected your way. This only works if they try to directly steal the URL from itch.io hosting your project. If they download your game and re-host it, there’s not much we can do about that. You could implement a site-lock into your game to help prevent that.