WIMB — Where Is My Buddy
Built for Extinction Rebellion Italia to solve a real operational problem: coordinators needed a way to quickly locate activists during high-risk actions without storing personally identifiable data.
- Designed the two-tier architecture from scratch: anonymous reporters submit in under 2 seconds; HelpDesk operators authenticate via TOTP 2FA
- Chose SQLite + SQLCipher (AES-256) over a full RDBMS to keep the deployment footprint minimal while ensuring data-at-rest encryption
- GDPR-compliant by design: reports auto-purge after 14 days, no PII stored
- Deployed via Docker on a hardened nginx stack with HSTS, CSP, and rate limiting