🔒 PrivaTools · privatools.me
221 file tools — PDF, image, media, developer — and for most of them your files never leave the browser. No account, no watermark, no upload, no trial that stops at page three.
The handful that genuinely need a server delete within the hour, and the privacy page names exactly which tools those are. A promise you can't check isn't a promise.
It exists because the alternatives make you upload a bank statement to a stranger's server to rotate one page.
| Container | read-only, cap_drop: ALL, no-new-privileges, bound to loopback |
| Images | cosign-signed in CI — the deploy refuses anything it can't verify |
| CSP | per-path, and a test walks the import graph, so a page can't quietly gain a network dependency |
| Monitoring | a probe every 30 min round-trips a real PDF through the live API and checks the bytes come back |
| Self-host | one container behind your own reverse proxy — MIT |
Most of what I build lives in private repos. The through-line is practical finance and operations tooling:
- Portfolio tracking — real-time, multi-account, multi-user investment dashboards
- Tax optimisation — an engine for Indian personal finance
- Cloud cost reporting — an automated AWS FinOps pipeline on Node and Postgres
- Commodity tracking — multi-platform gold and silver price monitoring
- Billing and accounting — GST invoicing and voucher tracking
Plus the small things that exist because I needed them once, like the instance hunter below.
⚡ Oracle Free Tier Instance Hunter · source
Oracle's Always Free ARM instances are almost always "out of host capacity," and the console gives you one attempt at a time. This retries until one lands. Zero dependencies, one bash script.
