Personal websites, made simple

Your site.
Your name.

Build a beautiful personal website in minutes — no code required. Share your work, blog, and resume at your own URL.

No credit card required.

Your own URL

Get a clean URL at myreadme.info/username — shareable and professional.

Split-screen admin with live preview. What you edit is what visitors see.

Home, About, Projects, Blog, and Resume — all editable from one place.

Passwords hashed with bcrypt at cost factor 12

Stateless JWT sessions — no server-side session store

Global email uniqueness enforced across all sign-in providers

Signup limited to 5 registrations per IP per 15 minutes

Spoofing-resistant IP extraction via X-Forwarded-For

HTTPS enforced with HSTS (1-year max-age, includeSubDomains)

Content-Security-Policy restricts scripts, styles, and frame sources

X-Frame-Options: DENY blocks clickjacking attacks

Magic byte validation — file signatures checked, not just MIME type

Strict allowlist: JPEG, PNG, WebP, and GIF only

5 MB size cap; user-scoped filenames prevent path traversal

All database access via Prisma — parameterized queries, no raw SQL

Every API route validates input server-side before touching the database

Cascading deletes ensure no orphaned data on account removal

Every admin API route verified server-side before any query runs

All writes are scoped to the authenticated user's ID from the JWT

URL username is verified against the session on every admin page load