Oh my god, that was so simple. Also forgot to put the variable names in quotes in the ajax call. Thanks a lot!
I will sanitize the inputs, and add a nonce. Looks like I ought to pair the transients with cookies as well, since I want them to be specific to the user. There’s always a lot more to learn it seems.
