BuildCV grew up with round 3, and it still uploads nothing
The second release of my free CV builder adds several CVs per browser, a CV review, job-ad tailoring, fit-to-one-page, Word export, LinkedIn import and share links. All of it runs in the browser, with no account and no server-side data.
13 Oct 2026
·
7 min read
·78 views
Security and privacy, in practice
A fourth host on the same jar: taking my kanban board off localhost
My kanban board had no authentication at all and handed its entire database to any caller. Putting it on focus.zakaria.lu meant a fourth host on the jar that was already running - plus a disclosure bug caught in review, and one cookie dot that 500'd every sign-in.
30 Jul 2026
·
8 min read
·99 views
Building this site in public
BuildCV: I shipped a free CV builder — no account, no paywall, no server-side data
I got annoyed at 'free' CV builders that paywall the download button, so I built one that is actually free: a guided wizard with a live A4 preview, French and English, and a PDF that never touches my server. Here is the product thinking, the architecture, and the near-outage a code review caught.
21 Jul 2026
·
6 min read
·156 views