A small, secure app that lives on boring hosting
Secure sign-in and payments.
Encrypted sign-in
Your password is encrypted in transit (TLS only) and stored as an Argon2id hash — never in plaintext. Sessions use hardened, server-side cookies.
Payments on Stripe
Checkout and billing run on Stripe's hosted pages, so card data never touches this server. Manage cards and cancellations in the billing portal.
Boring, reliable infrastructure
Plain PHP and MySQL. No Node.js, no build step, no framework — it runs on the shared hosting you already have.