diff --git a/backend/main.py b/backend/main.py
index dffcba8..d5b91c5 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -29,7 +29,7 @@ from fastapi.middleware.gzip import GZipMiddleware
 app.add_middleware(GZipMiddleware, minimum_size=1000)
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"], # For prototyping, allow all
+    allow_origins=["*"],  # Must be permissive — users access from localhost, LAN IPs, Docker, custom ports
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],