Peace Harbor Co.

Privacy Scrub is a Public Grok Bot template from Peace Harbor. Most privacy templates cover data brokers or call lists — and usually one person. This does both, for a household. One bot for people-search / data-broker opt-outs and FTC Do Not Call + telemarketing list removals — with a quiet weekly recheck. Who it covers: • Your household by default • Other family you explicitly add (spouse/partner, kids, parents, siblings) — even if they live elsewhere • Not auto-pulled from broker “relatives” sidebars Setup is a few simple questions. Opt-outs stay free (no paywall, no ID upload). You can optionally include prior homes from about the last 10 years, plus name variants or maiden names, so old listings still match after a move or a name change. Confirmation emails get finished for you. You approve each listing before anything goes out. Removals get verified; ignored ones get escalated. Quiet by default. x.ai/bot/OKsbOj9C2END1uLKlC2…

Rust on Cloudflare Workers is worth it for some jobs, not all of them. Worth it: image or PDF processing, parsing, crypto, anything CPU-heavy where a tight loop beats JS. Not worth it: a CRUD API that mostly waits on D1 or fetch. The network is the bottleneck there, and every hop across the JS/Wasm boundary costs you something. Profile first. Rewrite the hot path, not the whole app.

Before you send anything to a printer, run this checklist: 1. Bleed: extend backgrounds 0.125" past the trim line. 2. Safe zone: keep text 0.125" inside the trim. 3. Color: CMYK. Rich black for big solid areas only, never small text. 4. Photos at 300 dpi at the size they'll print. 5. Export a PDF with fonts embedded or outlined. 6. Read every word out loud one more time. Five minutes here saves a reprint.

WordPress behind Cloudflare: /wp-json is still a login surface. If anonymous GET /wp-json/wp/v2/users returns usernames, you've handed attackers a roster. Block or Managed-Challenge /wp-json/* for anonymous traffic, and don't rely on a "security" plugin that fights the WAF. When you eventually leave PHP for Workers/Pages, that surface leaves with it. Until then, treat the REST API like wp-login.

Agents: Medicare AEP runs through Dec 7. If you're knocking doors, leave something behind — something they'll actually read. 1,000 full-color door hangers: $154.99, shipped. Thick stock and UV included. Send your carrier/IMO-approved artwork 👇 printing.peaceharbor.com/sho…

Same Worker. Less sweat.

Logins are where "looks like it works" and "works" are furthest apart.

Big black background on a postcard or flyer? Plain 100% K prints flat — closer to charcoal than black. For large solid areas, ask for rich black (a common build is 60C 40M 40Y 100K). But keep small text in 100% K only — rich black on tiny type can misregister and look fuzzy. Big areas rich. Small type plain.

Putting WordPress behind Cloudflare and caching everything? Careful — that's how a logged-in admin bar or someone's cart ends up cached for strangers. A safe baseline: - Bypass cache when a wordpress_logged_in_, wp-postpass_, or woocommerce_items_in_cart cookie is present - Bypass /wp-admin/, /wp-login.php, cart and checkout paths - Cache HTML for everyone else, with a short edge TTL Cache the anonymous. Never the logged in.

WordPress tip if you're not ready to migrate yet: a lot of the junk traffic hits two URLs, /wp-login.php and /xmlrpc.php. If your site sits behind Cloudflare, a couple of free rules take real load off: • Block /xmlrpc.php unless something you actually use needs it (Jetpack, some mobile apps) • Put a Managed Challenge on /wp-login.php, or limit it to the countries you log in from • Keep your plugin-based login limiter too. Layers beat one lock. Less noise in your logs, less PHP work on every bot hit.

Need business cards this month? Here's the whole deal: • 250 for $37.99, 500 for $48.99, 1,000 for $53.99 • 16pt, UV and 4/4 at no extra cost • UPS Ground included (lower 48) • Free reprint if there's a print defect, reported within 14 days • Order online, ships to your door printing.peaceharbor.com/sho… #BusinessCards

Design tip: light gray text on white looks clean on a monitor. On a printed card it can wash out. Screens glow; paper only reflects. Thin fonts and pale colors lose contrast once ink hits stock. For small text on cards and flyers: • Go darker than you think • Skip hairline fonts at small sizes • Print one copy at home and read it at arm's length

Moving off WordPress? Don't forget the media library. Old posts point straight at /wp-content/uploads/2019/04/photo.jpg. Move the files to new paths and every one of those images breaks quietly. Two clean options: 1. Keep the same /wp-content/uploads/ path on the new site. 2. Or 301 the old path pattern to the new one with a single redirect rule. Then crawl the old sitemap and fix any 404s before you flip DNS.

Quick tip for door hangers: one offer, one way to reach you. Big headline, your photo, a QR code, and your contact info large enough to read from the porch. Save the paragraphs for the appointment.

Before you move a WordPress site anywhere, list every form on it. Contact, quote request, newsletter signup, that "call me back" widget someone added in 2017. Each one sends mail somewhere, and each one can break quietly after a migration. Write down where it lives, where submissions go, and who reads them. After cutover, submit every one yourself and confirm it arrived.

Moving a site off WordPress (or any host)? The quiet step that saves your cutover day: 48 hours before, drop your DNS TTL to 300 seconds. When you flip the records, the change spreads in minutes, not hours. If your DNS is already on Cloudflare and the record is proxied (orange cloud), an origin change is near-instant anyway. And leave MX and email TXT records alone, so the mail doesn't break with the website.

Realtors and agents — quick one 👇 What do you hand out most when you're prospecting?

Shipping one app to iPhone, Android, Mac and Windows? What's worked for us: 1. Share the logic, not the look. Keep data, rules and sync in one core, and let each platform keep its own navigation and controls. 2. Plan for offline on day one. Bolting sync on later is painful. 3. Test on the oldest, smallest device you support, not your new phone. 4. Leave slack before any launch date. Store reviews take time. People forgive a plain app. They don't forgive one that feels foreign on their device.

Your business card is often the one thing a customer actually keeps. So make it the thick one. Here, 16pt with UV costs the same as the thin one — 500 for $48.99, shipped. Easy call. printing.peaceharbor.com/sho…

Cloudflare tip: the orange cloud doesn't protect much if your server's real IP is still reachable directly. Check for leftover DNS records (mail., ftp., dev., staging.) that point at the same box unproxied. Then lock the origin so it only answers Cloudflare: allow-list Cloudflare's IP ranges in the firewall, turn on Authenticated Origin Pulls, or use a Cloudflare Tunnel so there's no open port at all. Even better: move what you can to Workers, and there's no origin to find.

Vibe-coded vs. agentic-built: password reset. Vibe-coded: "add a forgot-password link." It emails a link and works in the demo. Often the token never expires, works more than once, and the form tells anyone whether an email has an account. Agentic-built: the spec comes first. Single-use token, short expiry, stored hashed. Same response whether or not the account exists. Rate limit on the endpoint. Other sessions signed out after a reset. Tests prove each one before it ships. Same feature. Only one you'd trust with your customers.