Younes Saribey.

Built an e-commerce platform with abandoned cart recovery system that captures lost leads through WhatsApp rescue popups. 💡 Technical Challenges: Implemented 5 smart triggers (exit intent, 30s timer, inactivity, tab switch, back button) for lead capture. Built backend proxy architecture so Stripe API keys never touch the client (XSS prevention). Integrated Google Sheets webhook for progressive form tracking (started → typing → abandoned → completed). Multi-platform analytics with Meta Pixel + TikTok Pixel + Google Analytics. 🔐 Security: Backend proxy for Stripe, HMAC webhook verification, input sanitization. 📈 Business Impact: Real-time order automation (MAC/PIN → Google Sheets → WhatsApp auto-message), 100% Lighthouse SEO score with Astro SSG, bilingual FR/EN support.

B2B SaaS platform for phone resellers with enterprise-grade security and dynamic multi-currency pricing. 💡 Technical Challenges: Built 3-tier pricing engine (Basic, Pro, Enterprise) with automatic markup calculation. Implemented real-time DZD/USD conversion via configurable exchange rate in PostgreSQL. Per-user custom pricing overrides stored in JSONB columns. API aggregation layer connecting multiple IMEI providers with fallback logic. 🔐 Security: Row Level Security (RLS) for multi-tenant isolation (IDOR prevention), backend API proxy (keys never exposed to client), per-user rate limiting, IMEI format validation + SQL injection prevention. 📈 Business Impact: User dashboard with balance management + order history, reseller tiered pricing with volume discounts, rate limiting reduces API abuse costs.

Licensed Windows desktop app for cheque management with military-grade security to prevent piracy while enabling offline use. 💡 Technical Challenges: HMAC-SHA256 signed API requests (timestamp + appId + signature) prevent replay attacks. Machine binding via hardware fingerprint (canvas, screen, CPU cores, timezone) locked with SHA-256 hash. AES-256 encryption for license tokens with machine-derived keys. Anti-time-manipulation via server time sync detects clock tampering. Rate limiting (30 req/min per IP) prevents brute force. Request expiry with 5-minute timestamp window. Obfuscated storage with SHA256/MD5 derived keys. 🦀 Rust Backend: Tauri 2 runtime (10x smaller than Electron), native performance. 🔐 Security: HMAC-SHA256, AES-256, JWT admin auth, XSS/IDOR protection on admin endpoints. 📈 Business Impact: Admin dashboard for license CRUD, machine unbinding, configurable recheck intervals per customer, auto-update via Tauri updater.

Premium wholesale platform with modern UI/UX that elevates brand perception through advanced animations. 💡 Technical Challenges: GSAP scroll-triggered animations create engaging micro-interactions. Glassmorphism design with backdrop blur and vibrant gradients. Dark/light theming via CSS custom properties for consistent brand colors. Type-safe component variants using Class Variance Authority (CVA). React 19 with latest concurrent features. 📈 Business Impact: Premium brand perception through modern animations, improved user engagement with smooth transitions, scalable component architecture for rapid feature development.