The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
Firebase security rules for TripWeave (my own app). I wrote server-side rules for Cloud Firestore and the Realtime Database that check every write: field names, types, ranges and ownership. Only members can read a trip, joining can only add yourself, only the creator can start it, and code lookups are capped so trips can't be listed. I verified the rules with 24 automated allow/deny scenarios and wired in Firebase App Check with Play Integrity.
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
A self-initiated product: a booking and ordering system for a billiard club in Tbilisi. I designed it in Figma from scratch and built all of it, from the interface to the database.
Guests call the club and nobody answers. They arrive and every table is taken. They want food and wait at the bar. Side Pocket moves all of that to the website.
Key decisions
No guest accounts. A booking needs a name and a phone number. The guest gets a private link to move, extend or cancel. The link is the account.
A 15-minute hold. Guests check in with "I'm at the table." A table nobody claims goes to the waitlist, and the next person gets the same 15 minutes.
Ordering tied to the table. Guests order from their phone during the game, add time themselves and see the bill as it grows.
One screen for staff. Every table's state for the night, late arrivals and orders to serve pinned to the top, bookings and orders boards, alerts in Telegram.
A Telegram bot. It understands "table for 4 tonight at 8" in English or Russian and finishes the booking with buttons.
Scope
Guest site with live availability, single and group booking, waitlist, private booking page, table page with menu, cart and bill, email confirmations and reminders, staff dashboard, Telegram bot.
Stack
React 19, TanStack Start, TanStack Router and Query, Tailwind 4, Radix UI, Supabase Postgres with row-level security, pg_cron, Brevo and Resend, Telegram Bot API, Vitest.
Business rules sit in plain functions, separate from the UI and the database, with 73 tests. Only server functions touch the database.
My role
Product design, UI design, front-end, back-end, database, integrations.
Live demo: side-pocket.lovable.app
Built for the #LovableChallenge by @Contra and @Lovable. #BuiltWithLovable😊
nicety accomplished.. great work
Designed and developed a website for Sky Dine restaurant using Flutter Web — showcasing the restaurant's ambience through a visual gallery and a fully displayed menu for customers to browse before visiting. Deployed on Firebase Hosting for fast, reliable access.
Stellar Dungeon — a 2D dungeon crawler built in Godot 4.4 for the Argentina Builder Challenge 2026, with on-chain progression over the Stellar network. I contributed the backend blockchain integration: a Node.js relay and a Rust smart contract (forge_ledger) that log mining, crafting and forging on-chain, with per-player custodial wallets and an offline sync queue.
