The brief
A coach needed a site that did more than describe the offer: it had to capture leads through valuable gated content and stand up to German data-protection scrutiny, without the usual cookie-banner friction that scares visitors off.
Gated content that actually gates
Free resources (e-books, guides) are delivered through signed, time-limited download tokens generated by the backend, so a link cannot be shared or scraped for free forever. Capturing a lead and delivering the asset is one clean, stateless flow.
Compliance you can prove
The site is cookieless by default with explicit, optional consent, and every form submission writes an audit log entry capturing the timestamp, consent version, and request context, so the coach can prove ongoing GDPR compliance to an inspector rather than just claim it. A handover SOP ships with the site so standards hold after launch.
Stack
A React, Vite, and Tailwind front end prerendered to real HTML for SEO, over a Python aiohttp backend with HMAC-signed tokens and cookieless first-party analytics. Bilingual German and English, self-hosted fonts, one process to deploy.