Behind the scenes
How this site is built
This website is built the way I'd build yours: fast, secure, private and accessible. Here's what's under the bonnet, and how you can check it yourself.
What's under the bonnet
Pick a topic. The security tab checks this page's protections live, in your browser.
Fast, because the work is done in advance
Step 1: You open a page
On your phone or computer
Step 2: Nearest server answers
From a global network, not one machine in one place
Step 3: Page is already built
Nothing to look up or put together while you wait
Step 4: Page appears
With no database to wait on
Secure by default, and you can check it
Websites send hidden instructions to your browser, called security headers, that switch on extra protection. This reads this page's headers live.
Checking this page's headers in your browser…
Content Security Policy
CheckingThe page only runs code from this site, which blocks most injected scripts.
Strict Transport Security
CheckingYour browser always uses an encrypted connection here, even if you type http://.
Frame protection
CheckingOther sites can't load this one invisibly inside theirs to trick you into clicking.
No content sniffing
CheckingFiles are treated as exactly what they say they are, never guessed at.
Referrer policy
CheckingWhen you follow a link away, the other site only learns which website you came from.
Permissions policy
CheckingThe site can never ask to use your camera, microphone or location.
What happens when you send a message
The contact form is protected at every step, and keeps nothing once your message is sent.
Step 1: You press send
From the contact page
Step 2: Spam trap
A hidden field that only automated spam fills in
Step 3: Rate limit
No more than 5 messages in 10 minutes from one place
Step 4: Every field checked
On the server, not just in your browser
Step 5: Emailed to me
Then forgotten: nothing is stored
Private
No cookies
Nothing is stored in your browser, so there's no cookie banner to click through.
No tracking
Visits are counted without identifying you or following you to other websites.
No outside requests
Fonts and images come from this site, so your visit isn't reported to anyone else.
Nothing stored
Messages from the contact form go straight to my inbox. There's no database of visitors.
Accessible and reviewed
Every page is tested with automated accessibility checks at phone and desktop sizes, works with a keyboard alone, and uses colours with enough contrast to read easily. Animations switch off if your device asks for less motion.
Before launch the site had a security review of everything that handles your information, and the software it runs on was checked for known problems.
Built with
Next.js and React
Widely used tools for building fast, modern websites. Every page here is built in advance.
TypeScript
A stricter way of writing code that catches mistakes before the site goes live.
Tailwind CSS
Styling built from the Wellerbyte design system, so every page uses the same colours and type.
Vercel
Hosting on a global network, so pages load from a server near you.
Microsoft 365
Form messages are sent through the same Microsoft 365 email I run my business on, by an app that can only send from one mailbox.
Want something built like this?
Book a free 30-minute chat. Tell me what you're trying to achieve, and I'll come back with an honest answer on whether I can help.