Rob Helmer's blog posts matching the tag: privacy

Diagram of a browser form challenge verifying a token with a Cloudflare Worker.

8/16/2026 · 5 min read

Add Cloudflare Turnstile to Astro Forms and Workers

How I added Cloudflare Turnstile to an Astro newsletter form and verified tokens in a Worker: keys, CI, deploy order, and DevTools noise.

9/20/2026 · 4 min read

Filelathe: Drop Any File, Get an Invented Mini-App

How Filelathe uses Jev for typed compose and routing, then Claude Haiku to invent json-render Specs when you drop a format nothing else handles.

Analytics without a cookie banner — cookieless, first-party web analytics

6/19/2025 · 5 min read

Analytics Without a Cookie Banner: An Independent Guide

Analytics without a cookie banner, from an ex-Mozilla privacy engineer who sells no analytics tool: what cookieless tools measure and where GDPR stays murky.

Diagram showing privacy-preserving attribution flow from ad click to Umami event without cookies or PII.

8/15/2026 · 2 min read

Rocket Reversi: Privacy-Preserving Attribution End-to-End

How Rocket Reversi proved privacy-first attribution with Umami, UTM session tokens, and a $100 marketing experiment.

Architecture diagram showing OAuth provider, auth worker encrypting PII with public key, ciphertext-only database, and separate email worker with private key.

3/24/2026 · 11 min read

Asymmetric Encryption for Player PII in Multiplayer Games

How HPKE encryption protects user email addresses and personal data so the server can't read them even if compromised.

Sequence diagram showing secure authentication flow with HttpOnly cookies between user, browser, auth server, and game server.

3/17/2026 · 7 min read

Building Secure Login Systems with HttpOnly Cookies

How HttpOnly cookies with CHIPS prevent XSS attacks and cross-site tracking while maintaining seamless authentication across subdomains.

Connect

Find me on:

BlueSky

Mastodon

X (formerly Twitter)

Mail

GitHub