Very cool! Is this suitable for using as a private tracker?

not out of the box but it can be done. All the required moving parts are there (hash whitelist support, udp path parsing, peer rejection, etc).