I believe I am running into the same issue, I have attached my console output below. I have tried Chrome, Firefox and Edge, cleared the cache and disabled all addons. I have tested it with my phone and it will not work on it while connected to my network, but will work if I am not connected to the wifi. I am in central florida and my ISP is spectrum: (index):12 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-mN1un8suiSMkRUST' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-gRtaXgOOqNnThFat9nf3rr75hGRZCbLqYeOAj6zQZe4='), or a nonce ('nonce-...') is required to enable inline execution. (index):13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-mN1un8suiSMkRUST' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-zf3k9K7i/UYZTboocE+AYdefmhG1ZQlMOiV5ooU6EFk='), or a nonce ('nonce-...') is required to enable inline execution. jquery.migrate.js:20 JQMIGRATE: Logging is active (index):4718 GET <a href="https://app.roll20.net/assets/firebase.2.4.0.js" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js</a> net::ERR_ABORTED 503 (index):4587 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-mN1un8suiSMkRUST' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-vileAyXucIHIT+3pbOzFP62jSSQqBYQ/DZ/WZAa5v4Y='), or a nonce ('nonce-...') is required to enable inline execution. (index):1 A cookie associated with a cross-site resource at <a href="http://inspectlet.com/" rel="nofollow">http://inspectlet.com/</a> was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at <a href="https://www.chromestatus.com/feature/5088147346030592" rel="nofollow">https://www.chromestatus.com/feature/5088147346030592</a> and <a href="https://www.chromestatus.com/feature/5633521622188032" rel="nofollow">https://www.chromestatus.com/feature/5633521622188032</a>. (index):4718 GET <a href="https://app.roll20.net/assets/firebase.2.4.0.js" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js</a> net::ERR_ABORTED 503 app.js?1576172908:541 70 app.js?1576172908:543 TOUCH SUPPORTED: false app.js?1576172908:543 USING WEBGL ACCELERATION... app.js?1576172908:543 WEBGL STARTUP SUCCESS app.js?1576172908:545 Custom Sheet Translation app.js?1576172908:570 Uncaught ReferenceError: Firebase is not defined at new t (app.js?1576172908:570) at app.js?1576172908:571 at app.js?1576172908:571 at app.js?1576172908:572 t @ app.js?1576172908:570 (anonymous) @ app.js?1576172908:571 (anonymous) @ app.js?1576172908:571 (anonymous) @ app.js?1576172908:572 app.js?1576172908:541 Uncaught ReferenceError: Firebase is not defined at HTMLDocument.<anonymous> (app.js?1576172908:541) at fire (jquery-1.9.1.js:1037) at Object.fireWith [as resolveWith] (jquery-1.9.1.js:1148) at Function.ready (jquery-1.9.1.js:433) at HTMLDocument.completed (jquery-1.9.1.js:103) (anonymous) @ app.js?1576172908:541 fire @ jquery-1.9.1.js:1037 fireWith @ jquery-1.9.1.js:1148 ready @ jquery-1.9.1.js:433 completed @ jquery-1.9.1.js:103 ?timestamp=1576216742&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:40 Uncaught TypeError: d20ext.finalPageLoad is not a function at ?timestamp=1576216742&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:40 (anonymous) @ ?timestamp=1576216742&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:40 setTimeout (async) (anonymous) @ ?timestamp=1576216742&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:40 fire @ jquery-1.9.1.js:1037 fireWith @ jquery-1.9.1.js:1148 ready @ jquery-1.9.1.js:433 completed @ jquery-1.9.1.js:103