🟢 New
NNWs NEW MINECRAFT SERVER
Play if you want.
Open →

Welcome to
NNW Studios

A collection of creative projects, technical experiments, and multimedia content — exploring video, audio, and technology.

Hi, I'm Nanda NW — and this is NNWS, my personal space for everything I build, film, and explore. From event documentation and filmmaking to self-hosted tools, satellite experiments, and server projects, this site is a direct reflection of what I work on in my spare time.

My goal is simple: build tools that are maximally private and actually useful, and share my projects openly. Almost everything I make is available on GitHub — transparent, auditable, and under my own copyright. No black boxes, no hidden logic.

Privacy is not a feature here — it's the foundation. No cookies, no analytics, no data collection. Every tool I build follows the same principle.

About NNWS

I'm Nanda NW — NNWS (Nanda NW Studios) is my personal project space. Everything here is built, filmed, and maintained by me alone, in my spare time, out of genuine curiosity and a drive to create things that actually work well.

My focus is on two things: building tools that are maximally private and functional for anyone to use, and documenting projects — from regional events and filmmaking to technical experiments with satellites, SDR radio, servers, and more.

Almost all of my code is publicly available on GitHub — open for anyone to read, audit, or learn from. Everything is published under my own copyright. No trackers, no ads, no data collection — on this site or in any tool I build. That's a deliberate choice, not an afterthought.

News

Updates, new tools, and project announcements — everything happening at NNW Studios, newest first. No newsletter, no notifications.

March 14, 2026 · New Live
NNW Status Page — Live Service Monitoring
Real-time uptime monitoring for all NNW Studios services and servers — publicly accessible at status.nnws.qzz.io.

NNW Studios now has a public status page — you can check the live status of all tools and servers at any time without needing to contact me.

What's monitored
Web Services NNW main website, HyperTranslate, Transcript, SiteScope, MeteorTrack
Servers NNW Server 1, NNW Server 2, NNW Server 3 — live online/offline status
Uptime 90-day uptime history per service with response time graphs

Self-hosted via Tianji on the NNW infrastructure — no third-party monitoring service, no external data.

Self-Hosted Tianji Real-Time Live
Open Status →
March 14, 2026 · Tool Update Deployed
HyperTranslate & Transcript — Performance & Compatibility Update
HyperTranslate gets a significant performance overhaul. Transcript fixes TikTok subtitle compatibility after TikTok restricted their subtitle API to English-only.
HyperTranslate — Performance Overhaul
Improvement Significantly faster translation pipeline — reduced latency per round, especially noticeable at higher round counts
Improvement More stable under load — reduced chance of timeout on long translation chains
Improvement General backend optimisations to LibreTranslate request handling
Transcript — TikTok Subtitle Compatibility Fix
Fix TikTok subtitle API now only returns English subtitles — Transcript now falls back to local Whisper transcription for all non-English content
Fix Subtitle extraction no longer fails silently when TikTok returns an unexpected language track
Performance LibreTranslate TikTok Fix Whisper Fallback Both Deployed
HyperTranslate →
March 7, 2026 · Site Update v1.6.1
Mobile & UI Overhaul — Hamburger Nav, Lightbox Fix, Responsive Redesign
Full mobile pass: hamburger navigation, z-index-safe weather lightbox (no more flicker/crash), device-aware layout, and a refined monospace design system.

Version 1.6.1 is a focused mobile and UI quality pass — no new tools, but a meaningful improvement to how the site works on phones and tablets.

Mobile Navigation
Fix Horizontal nav replaced with hamburger menu on screens ≤ 750px
Fix Nav slides in from top — animated, with dark dimmer behind it
New Tap anywhere outside the nav (on dimmer) to close it
New Nav auto-closes when a page link is tapped
New Body scroll locked while nav is open
Weather Lightbox
Fix z-index conflict between header and lightbox — caused flicker and browser freeze on iOS/Android
Fix Close button was hidden behind header on mobile — now always visible and tappable (44×44px min target)
Fix GPU layer isolation via translateZ(0) — eliminates compositing flicker
Fix Image src cleared after close — prevents ghost-image on next open
New overscroll-behavior: contain — page no longer scrolls behind the lightbox on iOS
New Opening lightbox now auto-closes the nav if it was open
Design System
New Switched from Inter to IBM Plex Mono + IBM Plex Sans throughout
New Unified CSS variable system — consistent spacing, radii, color tokens
New Active nav link state (highlight on current page)
New clamp()-based fluid typography for hero headings
Performance & Responsiveness
New Particle count halved on mobile (30 vs 60) — better battery and frame rate
New @media (hover: none) — hover transforms disabled on touch to prevent stuck states
New Safe area insets (env(safe-area-inset-*)) for notched/dynamic island devices
New 100dvh used where full-screen height is needed — fixes iOS Safari address bar issue
New Gallery drops to 1 column on narrow phones; photo grid 2-column on mid-size mobile

No content was changed — all tools, news posts, and project descriptions remain identical. This update is purely structural and visual.

Mobile Responsive Hamburger Nav Lightbox Fixed No Content Change
March 6, 2026 · ~22:00 · Security Patch All Backends Deployed
Full Security Audit — All Backends Patched
Critical vulnerabilities discovered and patched across SiteScope, TikTok Transcript, HyperTranslate, and MeteorTrack. 17+ findings fixed per service.

At approximately 22:00 on March 6, 2026, a critical SSRF vulnerability was discovered in SiteScope during a routine review. This triggered a full security audit of all NNW Studios backends. Every service was patched and redeployed the same night.

SiteScope — Domain Scanner
Critical SSRF — private IP ranges accepted as scan targets (192.168.x, 127.x)
Critical CORS wildcard — any domain could issue cross-origin requests
High No rate limiting — unlimited scan requests possible
High IP logging always showed 127.0.0.1 behind Nginx proxy
High Redirect chains not validated — SSRF via open redirects
TikTok Transcript
Critical Path traversal — filenames from uploads not sanitised before disk write
Critical SSRF — subtitle URLs from yt-dlp fetched without IP validation
High CORS wildcard
High No rate limiting
High Proxy IP logging incorrect
Medium Whisper model race condition (no thread lock)
Medium yt-dlp download had no timeout or filesize cap
HyperTranslate
Critical Hardcoded admin credentials in source code
Critical User input text stored in RAM log (up to 500 chars per entry)
Critical CORS wildcard
High No rate limiting — unlimited translation jobs
High Up to 1000 rounds per request — CPU exhaustion possible
High Google Translator had no timeout
Medium Language codes and engine param not whitelisted
MeteorTrack
Critical CORS wildcard
High No rate limiting
High Parallel TLE fetches for same satellite (no async lock)
Medium SGP4 calculations blocked the event loop (not offloaded to executor)
Medium TLE field parsing without bounds check — malformed data crashed silently

No user data was exposed in any of these vulnerabilities. All issues were caught during internal review and patched before any known exploitation.

SSRF Path Traversal Hardcoded Credentials Rate Limiting Added CORS Fixed All Deployed No User Data Affected
March 6, 2026 · New Tool Live
MeteorTrack — Track Meteor-M2 Satellites in Real Time
Live position tracking for Meteor-M2-3 and Meteor-M2-4 — ground track, coverage footprint, orbital details. All calculations local with SGP4.

The fourth NNW tool is live: MeteorTrack shows the live position of the Russian weather satellites Meteor-M2-3 and Meteor-M2-4 — with ground track, coverage footprint, and orbital details.

Positions are calculated locally on the server using the SGP4 propagator. TLE data comes from CelesTrak (public domain, no API key, cached hourly). No N2YO, no paid API.

Interface available in German and English — automatically set by browser language, manually switchable.

Live Map SGP4 Local Ground Track DE / EN No Tracking
Open Tool →

Films & Projects

Everything here is something I personally built, filmed, or coded. Most projects are on GitHub under my copyright.

Tools

Privacy-respecting, self-hosted, and actually functional. No third-party APIs phoning home, no accounts, no data stored. Source on GitHub.

Weather Satellite Imagery

Satellite images captured and processed by me using RTL-SDR — receiving signals directly from Meteor-M weather satellites passing overhead.

Photo Gallery

Images from IFA to nature – compressed for faster loading

Photo 1 Photo 2 Photo 3 Photo 4 Photo 5 Photo 6 Photo 7 Photo 8 Photo 9

Get in Touch

I'm Nanda NW — feel free to reach out for questions, feedback, or collaboration:

Email: [email protected]

Follow NNW Studios:


Privacy, Security & Transparency

Privacy isn't an afterthought here — it's a deliberate choice built into every project from the start.


🔒 No cookies. Zero cookies of any kind — not session, not tracking, not advertising.

📊 No analytics. No Google Analytics, no Matomo, no tracking pixel, no SDK.

🚫 No ads, no data sales. No advertising network. No personal data ever sold or shared.

🛡 Self-hosted & local-first. Tools run on own server infrastructure. Input never reaches third-party APIs in default mode.

💾 No persistent storage. Data held in RAM temporarily at most. Nothing written to disk.

📂 Open source. Code on GitHub — no hidden logic, fully auditable.

🇪🇺 GDPR compliant. Operated from Europe. Data minimisation as core design principle.


Full details: Privacy Policy