We did a a paper last year on a scientific web app; we specifically told reviewers up front that if they visited the actual page, they would show up in the logs, and gave them code+instructions for running it on localhost if they cared about that. I don't think most people are even aware; referees are domain experts, not web devs.
