Guestbook

What it is

A public guestbook with live presence, stored in this site's own Cloudflare D1 database. Notes are validated, rate-limited and bounded, so the page stays fast and spam stays out. No accounts, no cookies — just a name you may leave blank and a message.

• Cloudflare D1
• Workers API
• Presence heartbeat
• Rate limiting

Under the hood

• Notes live in a D1 (SQLite) database behind the same worker that proxies the concierge — one deployment, two features.
• The worker validates and normalizes every note server-side and enforces a 3 notes / 10 minutes per-IP limit; the oldest rows are trimmed so the table stays bounded.
• Presence is a 45-second heartbeat keyed by a random per-tab id; the count shows visitors active in the last 90 seconds.
• The client parses defensively and mirrors the validation rules, so malformed data is skipped instead of rendered.

Honest notes

• Notes are public. Name is optional; nothing else is stored, but anything you type can be read by anyone.
• Presence is an approximation: it counts open guestbook tabs, not every visitor on the site.
• Rate limiting is per IP and best-effort per isolate, so a determined spamer could still get a few notes in before the limit bites.