A zero-knowledge password manager for logins, secure notes and payment cards. All key derivation and encryption happen in the browser inside a Rust/WebAssembly core — Argon2id derives the master key, XChaCha20-Poly1305 encrypts each item, and the keys never leave WebAssembly memory, so the server only ever stores ciphertext it cannot decrypt. Includes built-in one-time code (TOTP) generation, account recovery through a printed Emergency Kit combined with an emailed one-time link, encrypted backups, and import from LastPass, Bitwarden and browser exports. Row Level Security, per-item authenticated encryption and a 15-minute idle lock round out the security model.

A private, single-user mission-control app that watches and operates every other app in the fleet from one screen: uptime, deploys, CI runs, environment variables, DNS and databases. Every mutation it performs goes through a propose → confirm → apply pipeline with an append-only audit log, and an AI copilot can draft any action but execute none.

A personal-finance app built to replace two hand-maintained spreadsheets — one logging every purchase, one recording balances across banks, investments, money lent out and debts owed. Net worth, month-on-month change and every category total are computed in Postgres from the raw entries rather than kept as running figures. A month-end close ritual snapshots the period, twice-monthly reports go out by email, recurring bills post themselves, and a Gemini assistant files expenses from a sentence or a receipt photo. Row Level Security keeps every account's data its own; the service role holds no grant on any table.

An AI video maker for explainers and stories. From a one-line brief it drafts a scripted sequence of scenes, generates a still image and a narration clip per scene, optionally composes a music bed, and assembles the result with ffmpeg compiled to WebAssembly — entirely client-side, so nothing is rendered on a server. Each stage is reviewed before the next is generated, so a rewrite never costs a re-render. Generations run on the user's own Gemini key, stored encrypted; media lives in a private bucket scoped per user by Row Level Security.

A note-taking app with a block editor, wiki-links and backlinks, tags, version history and full-text plus semantic search. An AI layer answers questions across your notes and suggests tags, with per-user spend limits enforced in the database. Sealed notebooks reuse the zero-knowledge core built for Vault: a passphrase-derived key inside WebAssembly encrypts every note and attachment before it leaves the browser, so the server stores ciphertext and no AI feature can see inside. Sync is a Yjs update log projected into Postgres under Row Level Security.

A collaborative trip planner where the map is the document. Free text — a booking email, a blog post, a list — becomes geocoded stops on a day-by-day timeline; routes and travel times come from OpenRouteService; bookings and photos ride along in private storage scoped to the trip. A Gemini assistant proposes itinerary edits that apply only after confirmation, collaborators see each other's changes in real time over Supabase Realtime, trips can be shared read-only by link, and a fly-through animates the route on MapLibre before departure.

A job-application tracker that turns a spreadsheet of applications into a pipeline with analytics. Upload a resume and it becomes a structured profile; paste or link a job description and the app tailors the resume against it; ask the chat where things stand and it reads the pipeline; rehearse with a mock interviewer that runs over text or live voice via the Gemini Live API and scores the session afterwards. Every AI feature sits behind a per-user daily spend cap enforced in Postgres, and every user's data is isolated by Row Level Security.

Once a day the app reads price history, computed indicators and recent headlines for about eighty assets and has a model make a specific call on each. A scorer later walks the daily bars and records what happened. The result is a public, append-only track record — win rate, target-hit rate, average and median return, worst drawdown — broken down by asset, month and the confidence the model claimed, with the scoring rules published on a methodology page, including the ones that make the numbers look worse. Market data is shared read-only; signals cannot be edited after the fact, enforced by a database trigger.

A JavaScript regular-expression tester with live match highlighting, a full capture-group table, replace preview and split preview. Includes a syntax cheat sheet and a library of common patterns for the expressions everyone rewrites from scratch.

Generates a complete favicon package from letters, an emoji or an uploaded logo: a real multi-size favicon.ico plus apple-touch-icon, Android PNGs and a web manifest, downloaded together as one zip.

Converts one time across every time zone at once. Live world clock, unix epoch converter, DST-aware warnings, one-click copy in ISO 8601, and shareable links for coordinating across regions.

A privacy-first web application that compares two texts and highlights their differences instantly. Features side-by-side and unified diff views with word-level change highlights, ignore case and whitespace options, and a copyable unified diff. All processing happens locally in the browser, ensuring complete privacy as text never leaves the user's device.

A privacy-first web application that converts and compresses images between PNG, JPEG, WebP, and AVIF. Features quality control for lossy formats, proportional resizing to maximum dimensions, batch conversion with ZIP export, and before/after size comparison showing space saved per image. All processing happens locally in the browser, ensuring complete privacy as images never leave the user’s device.

A privacy-first web application for validating, formatting, minifying, and visualizing JSON data. Features real-time validation, pretty formatting, instant minification, and an interactive tree view with drag-and-drop nodes. All processing happens locally in the browser, ensuring complete privacy. The tree visualization allows users to explore JSON structures visually with collapsible nodes and export capabilities.

A privacy-first Base64 encoder and decoder supporting both text and images. All processing is done client-side for complete privacy. Features an interactive image viewer with zoom, pan, and download capabilities.

A privacy-first web application that generates custom QR codes for text, URLs, WiFi, contacts, email, and SMS. Features customizable colors, sizes, and corner styles with instant download support for PNG, SVG, and PDF formats. All processing happens locally in the browser for complete privacy.

A privacy-first web application that allows users to convert code snippets into images and PDFs. The tool uses Shiki to highlight the code and PDF-Lib to generate the compiled PDF. Supports 25+ programming languages and allows background color customization.

A privacy-first web application that allows users to merge multiple PDFs, split them into separate files, convert images to PDF, or add watermarks. Features include page rearrangement, rotation, removal, and customizable watermarking. All processing happens locally in the browser, ensuring complete privacy as files never leave the user's device.