<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Tulyro</title>
    <description>The latest articles on DEV Community by Tulyro (tulyro).</description>
    <link>https://dev.to/tulyro</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Forganization%2Fprofile_image%2F15524%2F33abe658-6881-492c-b521-7cf91d58c92f.png</url>
      <title>DEV Community: Tulyro</title>
      <link>https://dev.to/tulyro</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/tulyro"/>
    <language>en</language>
    <item>
      <title>Zero telemetry by architecture: how I built 25+ dev tools that can't track you</title>
      <dc:creator>Sameer Ahmad</dc:creator>
      <pubDate>Fri, 30 Oct 2026 11:59:02 +0000</pubDate>
      <link>https://dev.to/tulyro/zero-telemetry-by-architecture-how-i-built-25-dev-tools-that-cant-track-you-1k3o</link>
      <guid>https://dev.to/tulyro/zero-telemetry-by-architecture-how-i-built-25-dev-tools-that-cant-track-you-1k3o</guid>
      <description>&lt;h1&gt;
  
  
  Zero telemetry by architecture: how I built 25+ dev tools that can't track you
&lt;/h1&gt;

&lt;p&gt;Most "free online tools" are ad-tech in disguise. You paste a JSON blob or an API key into some formatter site, and your data travels to a server you'll never audit, gets logged somewhere you'll never see, and funds itself with the 14 trackers loading in the background.&lt;/p&gt;

&lt;p&gt;I built &lt;a href="https://tulyro.online" rel="noopener noreferrer"&gt;Tulyro&lt;/a&gt; as the opposite of that: 25+ free developer and utility tools where tracking isn't just disabled — it's architecturally impossible. Here's how.&lt;/p&gt;

&lt;h2&gt;
  
  
  The architecture: there is no server
&lt;/h2&gt;

&lt;p&gt;Tulyro is a statically exported Next.js site. There are no API routes, no database, no sessions, no server-side rendering at request time. The entire site is pre-rendered HTML, CSS, and JS served from a CDN. When you open a tool, your browser downloads the page and then the "backend" is... your own device.&lt;/p&gt;

&lt;p&gt;That single decision eliminates entire categories of privacy problems:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;No data transmission.&lt;/strong&gt; A JSON formatter that runs &lt;code&gt;JSON.parse&lt;/code&gt; in your tab has nothing to send anywhere. There is no endpoint to receive your paste.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;No analytics scripts.&lt;/strong&gt; No Google Analytics, no Mixpanel, no fingerprinting SDKs. Nothing phones home because there's no home to phone.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;No cookies.&lt;/strong&gt; No consent banner needed — there's nothing to consent to.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Works offline after first load.&lt;/strong&gt; Once the page is cached, most tools keep working with the network unplugged. Try that with a server-side tool.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Concrete examples
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;UUID generator&lt;/strong&gt; uses &lt;code&gt;crypto.randomUUID()&lt;/code&gt; — the browser's own CSPRNG. The UUID never exists anywhere except your tab.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Password generator&lt;/strong&gt; uses &lt;code&gt;crypto.getRandomValues()&lt;/code&gt;. A server-side password generator is an oxymoron; this one can't leak what it never sees.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;JSON formatter / Base64 / Epoch converter / Case converter&lt;/strong&gt; are pure functions over your input string. Input in, output out, nothing in between.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;QR code generator&lt;/strong&gt; draws to a &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt; locally. &lt;strong&gt;Markdown editor&lt;/strong&gt; renders preview via a client-side parser.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  The tradeoffs (honestly)
&lt;/h2&gt;

&lt;p&gt;Zero-telemetry architecture has real costs, and I'll name them:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;No cross-device history.&lt;/strong&gt; Your conversions live in your tab. If you want sync, you need accounts and servers — which is exactly what I refused to build.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Bundle size discipline.&lt;/strong&gt; Everything ships to the client, so every dependency is a download tax. I keep dependencies near zero and lazy-load heavy tools.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;No server-side secrets.&lt;/strong&gt; Anything needing an API key or private computation simply can't be a Tulyro tool. That's a feature boundary, not a bug.&lt;/li&gt;
&lt;/ol&gt;

&lt;h2&gt;
  
  
  Why this matters beyond privacy
&lt;/h2&gt;

&lt;p&gt;Client-side tools are also &lt;strong&gt;faster&lt;/strong&gt; (no round trips), &lt;strong&gt;cheaper to run&lt;/strong&gt; (static hosting costs almost nothing — which is why the tools can stay free forever), and &lt;strong&gt;more resilient&lt;/strong&gt; (no backend to go down, no database to breach).&lt;/p&gt;

&lt;p&gt;The privacy pitch writes itself, but the engineering pitch is the real one: the simplest system that can do the job is a page with no server.&lt;/p&gt;

&lt;h2&gt;
  
  
  Try it / break it
&lt;/h2&gt;

&lt;p&gt;Everything's at &lt;a href="https://tulyro.online" rel="noopener noreferrer"&gt;tulyro.online&lt;/a&gt; — the dev tools live under the dev section. Open devtools, watch the network tab while you format JSON: silence. That's the whole point.&lt;/p&gt;

&lt;p&gt;If you find a tool that leaks anything, that's a bug and I want to hear about it. Feedback welcome.&lt;/p&gt;

</description>
      <category>showdev</category>
      <category>webdev</category>
      <category>privacy</category>
      <category>architecture</category>
    </item>
    <item>
      <title>I built 25+ free browser tools with zero backend — here's what I learned</title>
      <dc:creator>Sameer Ahmad</dc:creator>
      <pubDate>Fri, 30 Oct 2026 10:54:22 +0000</pubDate>
      <link>https://dev.to/tulyro/i-built-25-free-browser-tools-with-zero-backend-heres-what-i-learned-5g4l</link>
      <guid>https://dev.to/tulyro/i-built-25-free-browser-tools-with-zero-backend-heres-what-i-learned-5g4l</guid>
      <description>&lt;h1&gt;
  
  
  I built 25+ free browser tools with zero backend — here's what I learned
&lt;/h1&gt;

&lt;p&gt;Every "free" online tool I used wanted something: my email, my files uploaded to their server, or my data for ads. So I built Tulyro — a collection of 25+ free tools (calculators, text utilities, developer helpers, generators) where &lt;strong&gt;everything runs 100% in your browser&lt;/strong&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  Zero backend, on purpose
&lt;/h2&gt;

&lt;p&gt;There is no server. No database. No accounts, no login, no saved history. Each tool is client-side JavaScript that executes on your device — the EMI you calculate, the JSON you format, the image you resize never leaves your tab. That is not a privacy policy promise; it is architecture. There is simply nowhere for your data to go.&lt;/p&gt;

&lt;p&gt;The site is a static build hosted on a CDN. Hosting costs effectively nothing, which is why everything can stay free with no ads and no "premium unlock" dark patterns.&lt;/p&gt;

&lt;h2&gt;
  
  
  What I learned
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;1. Privacy is a feature, not a footnote.&lt;/strong&gt; "No signup" turned out to be the strongest value proposition — stronger than any individual tool.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;2. SEO for tool sites is a different game.&lt;/strong&gt; Every tool page is programmatic, so I paired each with a genuinely useful guide (how EMI prepayment works, the 75% college attendance rule, SIP vs lumpsum). The guides teach; the tools let you act. Internal linking between them does the rest.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;3. Trust is the real currency.&lt;/strong&gt; New domains get flagged by automated scanners (my 7-day-old domain got a trust score of 0 on ScamAdviser — automatically, like every new domain). Real trust signals — an about page with a named human, a contact email, valid SSL, honest copy with no fake claims — are what actually matter.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;4. Speed is a feature.&lt;/strong&gt; No server round-trips means instant results. Users feel it.&lt;/p&gt;

&lt;h2&gt;
  
  
  Try it
&lt;/h2&gt;

&lt;p&gt;Tulyro is live at &lt;a href="https://tulyro.online" rel="noopener noreferrer"&gt;https://tulyro.online&lt;/a&gt; — free, no signup, no watermark. If a tool you need is missing, tell me in the comments and I'll build it.&lt;/p&gt;

&lt;p&gt;&lt;em&gt;Built by Sameer Ahmad. Everything you type stays in your browser.&lt;/em&gt;&lt;/p&gt;

</description>
      <category>webdev</category>
      <category>javascript</category>
      <category>showdev</category>
      <category>privacy</category>
    </item>
  </channel>
</rss>
