Shareable custom forms
A presentation-only demo leads into an editable builder that publishes a unique public link after creator verification.
Focused product
Custom Date Form Builder
A small, intentional form builder for publishing temporary, shareable date invitations.
Role
Next.js implementation, verification flow, private delivery design, lifecycle modeling, testing, and deployment.
Built with
Next.js · TypeScript · Supabase Auth · PostgreSQL · SMTP · Vercel
The brief
Why it exists.
A lightweight form should still treat identity, privacy, expiry, and response delivery as deliberate product concerns.
- For
- Creators sharing a short-lived invitation and respondents completing the published form.
- The outcome
- A Next.js product that lets verified creators configure a form, publish a unique link, and receive responses without exposing private contact details.
Product experience
What it helps people do.
Private response delivery
Respondent answers are validated against the stored active form and delivered to the creator without exposing the destination email to the browser.
Intentional temporary lifecycle
Forms expire exactly three days after creation, become unavailable at the timestamp, and are removed by an hourly cleanup job.
Screenshot 1 / 2 A focused respondent experience
Engineering notes
Decisions beneath the surface.
Identity without a user platform
Problem
The product needs to verify who may publish a form without growing into a profile or dashboard system.
Approach
Email magic-link verification proves creator identity, then server-side checks reuse only the verified session needed for publication.
Protecting creator contact information
Problem
Respondents need a way to send answers without learning the creator’s private address.
Approach
The server derives the private destination from trusted stored ownership data and keeps it out of the public form contract.
Exact expiration
Problem
A temporary link must stop working predictably even before background cleanup runs.
Approach
A timezone-aware database timestamp controls immediate retrieval and submission denial; the scheduled job later removes expired records.
Architecture
Small diagram, clear boundaries.
01
Creator & respondent
02
Next.js application
03
Verified identity & response delivery
04
PostgreSQL lifecycle rules
Quality
- Vitest, lint, typecheck, and production build
- Explicit time fixtures
- Route and security smoke checks after deployment
Security & trust
- Verified creator session
- Server-only credentials
- Private creator-email lookup
- Restrictive database grants and RLS
Live application
See the product in context.
Embedding depends on the project host's security policy. The external site remains the reliable preview.
Live preview unavailable in embedded mode.
Open live application