Practical, privacy-first writing on the web tools we build and the problems they solve.
ICO, PNG and SVG all still matter for favicons. Here is the practical set most modern sites should ship.
robots.txt can block many AI crawlers, but only when written precisely—and only for bots that choose to obey it.
Lazy loading can improve page load only when it delays non-critical work. Use it on below-fold media, not your LCP image.
Validate structured data with standards-first checks: JSON syntax, JSON-LD expansion, Schema.org types, rendered HTML, and production tests.
Browser fingerprinting combines small device and browser signals to recognize users without cookies. Here is how it works and what helps.
A practical guide to using aria-label, aria-labelledby, and aria-describedby without making screen reader UX worse.
Automated accessibility tools catch obvious defects, not real user experience. Here is where they fail and how to test the rest.
Audit color contrast with browser DevTools, computed styles and a small checklist—no plugins, design suites or paid tools required.
Most organisations already have shadow AI. This 10-minute, 7-question audit shows you exactly where you stand — and what to do next.
Contact forms are the weakest link in most websites' spam defenses. Here's why they're so vulnerable and what to do about it.
Chrome killed third-party cookies, the EU tightened consent rules, and users are blocking more aggressively. Here's what actually changed and how to adapt.
Alt text has become routine enough that most teams now add it automatically—and badly. Here's what makes alt text genuinely useful in 2026.
