Under the Hood

How this site works

I believe in transparency — about the work, and about the tools. Here's exactly what's running behind the scenes, and why each piece was chosen with care.

Built around four principles

Your data stays yours

Row-level security means even if someone broke into the database, they couldn't see another client's information. Sensitive data is encrypted. Payment details never touch my server.

Speed is respect

Every page loads in under a second because content is pre-rendered and delivered from the closest server. Your time matters — the site should never make you wait.

No dark patterns

No popups begging you to subscribe. No countdown timers creating false urgency. No hidden fees at checkout. The site is designed to feel as honest as the work.

Privacy by default

Self-hosted fonts (no Google tracking). Privacy-respecting analytics. Invisible spam protection. I don't use tools that sell your data.

The full stack

Every tool was chosen for a reason — security, speed, or simplicity. Nothing bloated, nothing unnecessary.

Next.js on Vercel

Framework & Hosting

The site loads fast because it's built with Next.js and hosted on Vercel's edge network. Pages are pre-rendered at build time, so when you click a link, the content is already waiting for you — no loading spinners, no lag.

Supabase

Database & Storage

Your data lives in a PostgreSQL database managed by Supabase, with row-level security policies that ensure each client can only see their own information. Sensitive fields are encrypted at rest using Supabase Vault.

Clerk

Authentication

The client portal uses Clerk for authentication — a purpose-built auth system that handles login, sessions, and security so I don't have to store passwords or manage tokens myself.

Stripe

Payments

All payments go through Stripe's embedded checkout. Your card details never touch my server — they go directly to Stripe, which handles PCI compliance, fraud detection, and secure processing.

Cal.com

Booking & Scheduling

Session booking uses Cal.com, which syncs with my calendar in real time. You see only available slots, and both of us get confirmation emails automatically — no back-and-forth scheduling.

Resend

Email Delivery

Confirmation emails and newsletter messages are sent through Resend, a modern email API. Emails are built with React Email templates for consistent formatting across all email clients.

MDX Blog

Content

Blog posts are written in MDX (Markdown with components) and stored as files in the codebase — no CMS login needed. This means the blog loads instantly and I can write from anywhere using my development tools.

Cloudflare Turnstile

Spam Protection

Contact forms and signups are protected by Cloudflare Turnstile — a privacy-respecting alternative to CAPTCHA. It verifies you're human without making you click fire hydrants.

Tailwind CSS

Design System

The visual design uses Tailwind CSS with custom design tokens — a warm cream palette, Lora serif headings, and Inter body text. Every element is designed to feel calm and intentional, matching the boundary work we do together.

Privacy-First Analytics

Insights

I use Vercel Web Analytics for basic traffic insights. No cookies, no tracking pixels, no data sold to third parties. I can see which pages are popular, but I can't see who visited them.

A note about AI

This website was built with the help of Claude, an AI assistant by Anthropic. Claude helps with the code, the design system, and blog post drafts — but every word you read has been reviewed and shaped by me.

The coaching is always human. AI helps me build the house — it doesn't sit in the chair across from you.

Still curious?

If you have questions about privacy, data handling, or anything else — I'm happy to answer.

Get in touch