9 min read
PayPal in Lovable: check the payment flow before launch
Lovable's PayPal integration simplifies checkout, but your app must still handle charges, statuses and refunds correctly.
Read the articleHej, I'm Kenny.
A quiet developer from Eskilstuna.
Kenny Tran · Founder, Ketryon
About me
I like time alone, ideally somewhere comfortable. I'd rather take the long route and finish something properly than take a shortcut.
Hard work gives me a sense of purpose, and I'm proud of how I work. Talking about it is the part I'm still practising.
Day to day
I run Ketryon AB in Eskilstuna, Sweden. Ketryon is development on subscription: one flat monthly price and one task at a time, for founders building a company on their own.
Things I've made
Built, shipped, and running.
Outside of work
The rest of the time.
Usually, at once
- Code on one screen
- A series on the other
Food
I like eating. I like snacks even more.
Walks
Long ones, with a podcast or music.
Pokémon
I've played since I was a little kid. I still do.
Sports
I used to play. These days I mostly walk.
Travel
Best when it's somewhere I've never been.
How the blog is written
The articles are drafted with AI from changes in the tools founders build with — Supabase, Stripe, Next.js and the like — and published under my name after a one-week review window.
Articles
9 min read
Lovable and Supabase – check RLS before launch
Login does not automatically protect your data. Here is how to review tables, files and access rules in a Lovable app using Supabase.
Read the article8 min read
The Trigger.dev leak: rotating secrets without downtime
How to identify potential leaks, rotate environment variables in the right order and look for unauthorised use without unnecessary disruption.
Read the article9 min read
Lovable Events & Hooks: connect other services without security risks
Lovable can now call your own services when project events occur and before messages are sent, but the connection requires clear security boundaries.
Read the article8 min read
Vercel can manage the Stripe key – which risks does this remove?
Vercel’s managed Stripe keys reduce the spread of secrets, but you still need to control permissions, environments and access.
Read the article9 min read
Vercel is changing the terms for Hobby and Pro – check this
Vercel’s new terms make it more important to review commercial use, the risk of suspension and your ability to move your service.
Read the article9 min read
Stripe data in Postgres: what can replace webhooks?
Stripe's real-time sync simplifies reporting and troubleshooting, but product access still requires clear rules for delays and responsibilities.
Read the article8 min read
Supabase is disabling older TLS encryption – check your integrations
Older clients may lose access to Supabase when outdated TLS settings are removed from projects’ HTTP APIs.
Read the article9 min read
Vercel charges for deployment storage – manage costs and rollback
Vercel’s new storage charges make retention a trade-off between lower costs and the ability to restore an older version quickly.
Read the article9 min read
Has your Lovable or Supabase key ended up on GitHub?
GitHub now finds more leaked Lovable and Supabase keys, but a warning is only the start of the work.
Read the article8 min read
Set spending caps before an API bill spirals
How to review spending caps, alerts and shutdown controls for AI, databases, email and other usage-based services.
Read the article9 min read
Cookies and CDN caching on Vercel for signed-in pages
Vercel no longer CDN-caches responses with Vary: Cookie, affecting security, response times and load on personalised pages.
Read the article6 min read
Critical Next.js update without taking production down
How to check whether your Next.js app is affected, choose the right security release and test critical flows before deployment.
Read the article
