Every "what should I build" thread on here is full of AI wrappers fighting over the same five SaaS founders. Meanwhile there's a guy sitting at a loading dock right now, doing arithmetic in his head, who is about to undercharge his broker by a few hundred bucks because nobody built him a 30-second tool.
I built that tool. It's a free detention-pay calculator for truck drivers. This is the build log — the niche-selection, the single-file stack, and two decisions (an SVG gauge and a no-mail-service auth scheme) that were more interesting than the app deserves.
I'm not a trucker. I build small free web tools for industries other may find unglamourous or not enticing enough. That honesty matters later.
The problem (worth $2–6k/yr to one user)
Truckers get a "free time" window at a dock — usually 2 hours. Past that, the broker owes detention pay (~$50–100/hr). Drivers leave an estimated $2,000–6,000/year of it unclaimed, mostly because the math + the paperwork is annoying enough to skip.
So the spec wrote itself:
- In/out times + free hours + rate → dollars owed.
- Export a dispute-ready PDF they can email the broker.
- Work on a phone, no login, instant.
Validating before writing a line
The mistake I almost made: assume the niche is empty because I'd never heard of it. I checked. It is not empty — DockClaim ($49/mo, GPS tracking), Detention Buddy, a couple of $9.99/mo App Store apps, even a free email-gated web calculator or two.
That killed my first instinct ("be the only one") but clarified the real wedge: everything is a paid app download or email-gated. The opening was a genuinely free, no-signup, instant web version that also generates the claim PDF. Not "the only detention tool" — the one with the least friction. I'll say more on why I'm careful about that claim at the end.
Lesson: validate to find your angle, not just a go/no-go. "Crowded but all friction-heavy" is a fine market.
The stack: one HTML file
No framework. The whole app is a single self-contained .html — markup, CSS, vanilla JS, jsPDF from a CDN. It deploys as a static asset. Cold-loads instantly on a trucker's phone on dock wifi, which is the only performance budget that matters here.
The core math is anticlimactic, which is the point — including the one edge case people forget, the overnight dock wait:
function detentionOwed(arriveMin, leaveMin, freeHrs, rate) {
let wait = leaveMin - arriveMin;
if (wait < 0) wait += 24 * 60; // crossed midnight at the dock
const billable = Math.max(0, wait / 60 - freeHrs);
const charged = Math.ceil(billable); // brokers bill by the hour
return charged * rate;
}
The PDF is the actual product. jsPDF, a few doc.text() calls laying out a claim, and a footer line — "Generated free at quackbuilds.com…". That watermark is the entire distribution strategy: every claim a driver emails a broker carries the tool into a logistics company's inbox. The artifact does the marketing.
Decision 1: an SVG instrument gauge instead of a progress bar
The audience reads dashboards all day, so the result is a round gauge — a dim "free-clock" arc that hands off to a glowing amber "billable" arc, with a seven-segment LED readout (DSEG font) in the center.
The trick is splitting one dial into two arcs with stroke-dasharray + stroke-dashoffset. A 270° sweep, the free segment first, the billable segment offset to start exactly where free ends:
const R = 84, C = 2 * Math.PI * R, ARC = 0.75 * C; // 270° of the circle
const freeLen = (Math.min(freeMin, wait) / wait) * ARC;
const billLen = (Math.max(0, wait - freeMin) / wait) * ARC;
gaugeFree.setAttribute("stroke-dasharray", `${freeLen} ${C}`);
gaugeBill.setAttribute("stroke-dasharray", `${billLen} ${C}`);
gaugeBill.setAttribute("stroke-dashoffset", `${-freeLen}`); // negative = start later
Both <circle>s are transform="rotate(135 100 100)" so the gap sits at the bottom. CSS transition on the dash properties animates the fill for free. No charting lib.
Decision 2: cross-device sync with no email service
Users wanted their saved loads to survive across phone → laptop. That needs identity. The repo's other apps use crypto wallet connect — great, except truckers are roughly the least crypto-native audience alive. And there was no mail service wired up, so magic-links were off the table without adding (and paying for) one.
So: email + a recovery code. On first backup the server mints a high-entropy code, returns it once, and stores only an HMAC of it. Restore = email + code. Cheap, no mail provider, and the code is the secret so it's not guessable like a bare email would be.
const hash = (email: string, code: string) =>
createHmac("sha256", PEPPER)
.update(`${email.toLowerCase()}:${code.toUpperCase()}`)
.digest("hex");
// store `hash` only; on restore compare with timingSafeEqual()
Wallet connect is still there as a second option for the few who want it. Everyone else types an email and copies a code.
The gotcha that almost shipped
The repo's shared Supabase client uses the anon key. Convenient — and it means any table that client touches is reachable through public PostgREST. Fine for public data; not fine for a table of user logs. Someone could enumerate rows with the anon key that ships in the browser bundle.
Fix was two lines: route the API through the service-role client, and in the migration alter table … enable row level security; with no policies. No policies = anon/authenticated denied entirely; the service role bypasses RLS. The table becomes reachable only through the server route that mediates the code check. Easy to forget, easy to verify — I had the API smoke-tested for bad_code, not_found, and the happy path before trusting it.
Why "unglamourous" is the moat
Three things fall out of picking an unglamorous niche:
- The spec is knowable. I'm not guessing what a "better AI assistant" means. Detention pay has rules. You build to them and you're done.
- Distribution is built in. The PDF goes where the buyers are (brokers/logistics ops) without me running ads to them.
- Nobody's bored-industry-pilling the competition. The incumbents are sleepy paid apps. Friction is the whole opening.
It shipped in about a day as a single file plus one API route and one migration.
The honesty footnote (it's a feature)
When I drafted the launch post I wrote "the only free no-signup web version." Then I checked, found a couple of free web calculators, and cut the claim. If you're going to build in public, the fastest way to torch your credibility is a superlative someone disproves in a reply. "Mostly paid apps or email-gated, so I made a free no-login one that also generates the claim PDF" is true and still sells. Ship the true version of the pitch. Only reason for your email or crypto wallet address is strictly for persistence across browser closes or swapping devices (Other than those two use cases) it is not needed at all.
If you want to poke at it: detention-pay calculator — type 08:00 → 12:30 and watch the gauge.
What's the most unglamourous-but-real niche you've shipped for? I'm collecting them. They very well may be my next tool to hit my page!
www.QuackBuilds.com - Built by @itsevilduck
