AI-ASSISTED FULL-STACK DEVELOPMENT

Cha Galau Loyalty & Analytics Platform

A highly secure, serverless customer retention engine built to track zero-party marketing data and prevent client-side manipulation.

COMPUTE

Cloudflare Workers

DATABASE

D1 (SQLite)

FRONTEND

Vanilla JS + Tailwind

SECURITY

Zero-Trust / Bearer Auth

01. Marketing Technology Engine

  • Zero-Party Data & UTM Attribution Engineered a cookie-less tracking pipeline that captures utm_campaign parameters from initial URLs and binds them directly to the user's secure profile during WhatsApp OTP verification.
  • Real-Time Cohort & LTV Analysis Replaced expensive 3rd-party SaaS tools by writing complex SQL Common Table Expressions (CTEs) to aggregate real-time Month-over-Month (MoM) cohort growth and Customer Lifetime Value directly on the edge database.

02. Secure-by-Design Architecture

  • Zero-Trust Transaction Ledger Prevented client-side payload manipulation by enforcing server-side balance recalculations. The worker securely validates the session ID and queries the database before permitting stamp redemptions, logging immutable negative delta transactions rather than overwriting rows.
  • SQL Injection (SQLi) Mitigation Identified backend vulnerabilities related to D1 type-casting and refactored 100% of REST API queries to use strict parameterized bindings (.bind()), thoroughly insulating the database against malicious payloads (OWASP A03).
  • Cross-Platform Input Sanitization Developed custom RegEx pipelines to sanitize OS-level device anomalies (such as iOS smart dashes and invisible trailing spaces), preventing silent system execution errors during database entry.