LPagesAppLabs S.R.L.

The Dev
MyJournal

Build logs, security deep-dives, and engineering notes from LPagesAppLabs. No fluff. Honest progress reports. Real engineering decisions explained.

Security GameDev Privacy Tools
// current builds
LockedPages
Closed Beta
Galaxy Diamond
Core engine
Mini Motor Maze
Phase 1
miLife
Phase 0
Clip Trimmer
V2 shipped

Latest posts

Security Published

Argon2id vs PBKDF2: Why I Upgraded LockedPages

PBKDF2 at 600,000 iterations takes 150 ms on a modern CPU and 2 ms on a GPU. Argon2id is the OWASP #1 recommendation for a reason. Here is the full migration story.
Deep Dive
2026-06-186 min read
Privacy Published

Zero-Knowledge by Design: Architecture Notes for miLife

Building a private life archive with no accounts and no cloud. The design decisions behind Lives & Moments, local-first storage, and why AES-256-GCM from the start.
Architecture
2026-06-197 min read
GameDev Planned

Adaptive Difficulty in Match-3: How We Built the AI System

Series: Galaxy Diamond Devlog · Part 1
Naive difficulty curves treat every player identically and fail them both. This is how we built an adaptive AI system that reads momentum and adjusts quietly, and why the design turned out harder than the code.
Engineering
Planned~12 min read
⋯
Tools Published

Clip Trimmer: From 0 to 55 Tests in One Month

Building a Python CLI that automates face crop, punch zoom, and word-level captions. The 55 tests are a catalogue of things that broke silently: FFmpeg, Whisper drift and ASS format edge cases.
Build Log
2026-06-198 min read
Research Planned

.apx Format: The Design Principles Behind a Smarter Archive

Standard archive formats treat files as flat lists. The .apx format was designed around different principles: content awareness, deduplication and search. This is why the distinction matters and what it enables.
Research
Planned~14 min read
⋯
GameDev Planned

Unity 6 ScriptableObjects: The Architecture Behind Mini Motor Maze

Series: Mini Motor Maze Devlog · Part 1
ScriptableObjects as the single source of truth for car stats, track configs, and level data. The pattern that lets us balance 20 levels without touching a line of code.
Engineering
Planned~9 min read
⋯
No posts in this category yet.
// Verifiable, not claimed

Security Posture, Measured Live

These posts argue for privacy by construction, so the page they are published on has to meet the same bar. Here is what this origin actually does, read out of the page you are reading right now by your own browser. Open devtools and check any line of it.

Third-party origins loaded
0
No fonts, analytics or tag manager loaded from another host
Cookies set
0
No consent banner, because there is nothing to consent to
Browser storage entries
0
Nothing written to localStorage or sessionStorage
Content Security Policy
default-src 'self'
No unsafe-inline, no unsafe-eval, no external origin permitted
HTTPS enforcement
2-year
Strict-Transport-Security with includeSubDomains
Capabilities denied
9
Camera, microphone, geolocation, payment, USB and ad-topics APIs

The values above are the ones we ship. With JavaScript enabled they are replaced by what your own browser actually observed, measured at —. A row turns red if reality disagrees with us.

Who we are, on the record · The platform ↗

// New posts · no spam

Get notified when a post drops

New articles are infrequent and deliberate. When something ships or a hard problem gets solved, you will hear about it.

Opens your email client. No server. No tracking. No third party.