Key Features

• AI-generated itineraries powered by Google Gemini, with day-by-day cost breakdowns in both the traveler's currency and the destination's local currency
• Conversational planner UI — a chat-style form that mimics talking to an AI assistant, complete with typing indicators and persisted session state
• Budget feasibility analysis — automatically determines whether the user's budget is sufficient, with a recommended minimum amount if it falls short
• Live flight data — real-time flight status checks between origin and destination airports using the AeroDataBox API
• Dynamic image galleries — destination photos from the Unsplash API with lightbox viewing, proper attribution, and an intelligent caching system to reduce API usage
• User authentication — secure Google OAuth login via Supabase Auth, with Row Level Security policies
• Personal dashboard — save/view/delete trips, favorite destinations with a floating carousel UI, and user preferences (currency, theme)
• PDF export — the full itinerary downloadable as a formatted PDF
• Responsive design — a fully mobile-optimized interface, with custom animations via Framer Motion
• Light/Dark theme system — CSS variable-based theming synced to the user's profile

Tech Stack

Key Features

• Automatic source detection with rich thumbnail/title fetching via YouTube and TikTok oEmbed APIs, falling back to Open Graph scraping for generic links
• User-defined categories with auto-assigned color coding, plus many-to-many collections with selectable icons
• Universal status pipeline (Saved → In Progress → Done) that works across both videos and articles
• Full-text search, long-press multi-select with bulk move/delete, and swipe-to-delete gestures
• Custom bottom tab bar with a raised floating action button, styled after Material Design 3
• Dynamic light/dark theming via React Context, persisted across sessions
• Native Android share-intent integration — save links directly from another app's share sheet
• Fully on-device storage via AsyncStorage — no backend or account system required
• Export entire library as JSON via native share sheet, or clear all data anytime

Tech Stack

Key Features

• AI travel assistant — a chat widget powered by Google's Gemini API (via Netlify serverless functions) that answers visitor questions about routes, seasons, and attractions in both Filipino and English
• Real-time visitor analytics — live visitor counter and monthly stats using Firebase Realtime Database
• Interactive spot explorer — searchable/filterable tourist spot cards with a details modal, embedded video content, and a Firebase-backed likes/favorites system with optimistic UI updates
• Filterable photo gallery — category-based masonry gallery with a custom lightbox and keyboard/swipe navigation
• Location & directions hub — tabbed Google Maps embeds, a sticky map layout, and a custom video hero built from a self-produced Google Earth Studio flyover (Manila → Casiguran) with a user-controlled sound toggle
• Fully responsive — mobile-first layouts, hamburger navigation, and touch gesture support throughout
• Modular CSS architecture — one shared base.css (design tokens, navbar, footer, chat widget) plus page-specific stylesheets, cutting duplicate code by roughly 70%
• Vanilla JavaScript (ES modules) with Firebase SDK, IntersectionObserver-based scroll reveals, and native dialog-style modals — no front-end framework overhead
• Serverless backend via Netlify Functions proxying the Gemini API, keeping API keys out of client-side code
• Debugged and resolved several production issues independently: broken serverless function routing, deprecated AI model references, case-sensitivity image bugs (Windows vs. Linux filesystems), and environment variable mismatches between code and hosting config

Tech Stack

Key Features

• Zero-trust key architecture — each account gets a random 256-bit vault key, never derived from the password, kept only as two independently AES-256-GCM-wrapped copies: one unlockable by the master password (scrypt-derived), one by a 128-bit Recovery Key. Every field's ciphertext is bound via AAD to its specific user, entry, and field, so ciphertext can't be swapped between records
• Self-healing recovery — a Recovery Key works exactly once: using it to reset a forgotten password atomically re-wraps the same vault key under a new password and issues a brand-new Recovery Key. Users can also rotate it on demand from a dashboard "Security desk" after re-authenticating
• Distributed rate limiting — sign-in, recovery, key regeneration, and account deletion are throttled per client and per account via Upstash Redis (SHA-256-hashed keys, no PII stored), with an in-memory fallback if Redis is unreachable. The UI shows a live countdown sourced from the server's Retry-After header
• Password health dashboard — client-side-only analysis flags weak, reused, and long-untouched passwords and lets the user filter entries by each flag; nothing is sent to a server to be analyzed
• Auto-lock — a configurable idle timer (5–30 min) wipes decrypted data from the page and ends the server session, with a 30-second warning the user can cancel
• Hardened by default — per-request nonce-based CSP (no unsafe-inline for scripts), HSTS, and standard security headers via custom middleware; bcrypt for login, scrypt for key derivation, generic error responses to prevent account enumeration
• Full vault CRUD — search, category filters, favorites, a password generator with unbiased randomness (crypto.randomInt), a strength meter, and server-enforced createdAt/updatedAt timestamps the client can never overwrite
• Automated test suite — 100+ Vitest tests covering crypto primitives (tamper/wrong-key detection, AAD binding), every auth route, and a full account-lifecycle integration test, run via GitHub Actions CI on every push
• Editorial UI system — a from-scratch "luxury newsprint" design language (custom typography scale, letterpress rules, an animated lock icon standing in for letterforms in headlines) built as reusable components

Tech Stack