🏖️ Beach House Management System

Elsa's
Beach House
System

A full-stack property management web application built for real-world hospitality operations — reservations, accounting, payroll, restaurant, and more.

🌐 Visit Live Site 📱 View Modules
12+
Core Modules
100%
Cloud Synced
4
User Roles
A+
Security Grade
0
Monthly Fees
All Modules

Every Feature You Need

Built specifically for Elsa's Beach House — Port Barton, Palawan. Every module is real, live, and in daily use.

📊 Dashboard Live
3
Occupied
₱8.4K
Today
2
Arrivals
1
Checkout
Monthly Revenue
Today's Arrivals
• Mike Santos — Room 1
• Ana Cruz — Room 2
📊
Dashboard
Real-time overview of occupancy, revenue, arrivals, checkouts, and quick actions. Period selector for custom date ranges.
Real-timeRevenueOccupancy
📅 Room Calendar — May 2026 3 Active
Booked Confirmed Checked-In
ROOM 1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
ROOM 2
1
2
3
4
5
6
7
8
9
10
11
12
13
18
📅
Room Calendar
Visual monthly grid showing all room bookings. Click any cell to add or edit. Automatic conflict detection with visual alerts.
Visual GridConflict DetectionClick-to-Book
📋 All Reservations 5 Records
GuestRoomCheck-InTotalStatus
Mike S.Rm 1May 17₱3,000In
Honey T.Rm 1May 19₱3,000Conf
Ana C.Rm 2May 20₱4,500Bkd
Jose R.Rm 1May 22₱6,000Conf
📥 Excel
🖨 Print Slips
📋
All Reservations
Full sortable and filterable table of every booking. Export to Excel, print all slips, search by guest name, room, or status.
Filter & SearchExcel ExportPrint Slips
🛏 Manage Rooms 1 Active
ROOM 1
Beach View · 2 Pax Max
Active
Rate: ₱3,000/night
Breakfast: ₱200/pax
Cozy beachfront room with ocean view...
+ Add Room
🛏
Manage Rooms
Add, edit, or deactivate rooms. Set rates, breakfast pricing, capacity, and description that appears in the guest booking portal.
Room ConfigRatesActive/Inactive
💰 Sales & Expenses May 2026
TOTAL SALES
₱42,500
▲ +18% vs last month
TOTAL EXPENSES
₱18,200
Utilities, Supplies...
DateDescriptionModeAmount
May 18Room 1 - MikeCash₱3,000
May 17RestaurantGCash₱570
💰
Sales & Expenses
Record all income and expenses. Supports Cash, GCash, Card, and Bank Transfer. Payment screenshots can be attached for audit purposes.
Multi-paymentCategoriesAudit Trail
📊 P&L Report Profitable
Total Revenue ₱42,500
Total Expenses (₱18,200)
Net Profit ₱24,300
Rev
Exp
Net
Profit Margin: 57.2% 🎉
📈
Sales Ledger, Expense Ledger & P&L
Month-by-month ledgers with search and filters. Full P&L report with profit margin — printable and exportable to Excel.
P&L ReportLedgersProfit Margin
👥 Payroll May 1–15
Mike R.
₱5,600
Ana T.
₱4,500
Jose L.
₱3,800
GRAND NET PAY ₱13,900
💾 Save
📊 Post
🖨 Print
👥
Payroll
Employee wage computation with overtime, holiday pay, and cash advance deductions. Post total wages directly to accounting. Prints individual payslips.
Auto-computePayslipsPost to Accounting
🍽️ Restaurant & F&B Today: ₱570
ITEMS IN STOCK
14
⚠️ 2 low stock
TOTAL F&B SALES
₱18.2K
▲ All-time
ItemQtyTotalMode
Bottled Water1₱70Cash
Lunch Meal1₱500Cash
🍽️
Restaurant Inventory & Sales
Track F&B inventory with low-stock alerts and automatic deductions on sale. Record walk-in restaurant sales separate from room revenue.
Stock TrackingLow-stock AlertsAuto-deduct
🏖️ Guest Booking Portal Public
ROOM 1 — Beach View
Check-In: May 22, 2026
Check-Out: May 24, 2026
Total: ₱6,000
🎉 Booking Confirmed — #JEYWJL1E
Confirmation sent to guest & admin
📈 Analytics & Charts 2026
Revenue by Month
Occupancy Rate
73%
Walk-in
62% bookings
Online
38% bookings
📈
Analytics & Charts
Visual charts for revenue trends, occupancy rates, booking sources, and business analytics. Custom date range selection for any period.
Revenue ChartsOccupancyBooking Source
🗂️ Backup & Restore Synced
☁️
Supabase Cloud
Auto-synced · All devices
● LIVE
💾
Full JSON Backup
Export all data as .json
Export
📂
Import Backup
Restore from .json file
Import
🗂️
Backup & Restore
Automatic cloud sync via Supabase plus manual JSON export/import. Full data recovery capability. Payroll has its own separate backup cycle.
Cloud SyncJSON ExportOne-click Restore
🏖️ Guest Booking Portal Public · No login needed
1️⃣
Select Room
View availability
2️⃣
Pick Dates
Auto-blocked taken dates
3️⃣
Confirm
Email sent instantly
🌐
Public Guest Booking Portal
Guests can browse rooms, check availability, and submit booking requests directly from the website — no login required. Booking confirmation emails sent automatically to both the guest and admin via EmailJS. All submissions sync to Supabase in real time.
No LoginAuto EmailReal-time SyncAvailability Check
Security Audit

Built Secure by Design

Every layer of the system was built with security in mind — from API key protection to login rate limiting.

🔑
API Key Protection
PASSED
Supabase API key stored server-side in Cloudflare Worker — never exposed in HTML source code
All database requests proxied through /api/db — no direct client access to Supabase URL
Browser DevTools inspection reveals zero credentials
🔐
Password Security
PASSED
All passwords hashed using SHA-256 with unique per-user salt — never stored in plain text
Login rate limiting: multiple failed attempts trigger a 15-minute lockout
Admin PIN required for all destructive actions (delete, clear data)
☁️
Cloud Data Integrity
PASSED
Supabase cloud is the authoritative data source — local data always verified against cloud on login
All writes (reservations, sales, payroll) push to Supabase atomically
Full JSON backup export available anytime for offline disaster recovery
👥
Role-based Access Control
PASSED
4 user roles: Owner, Admin, Manager, Supervisor — each with configurable module access
Admin can enable/disable specific pages per user account
Audit log tracks all sensitive actions (edits, deletes, logins)
🌐
Infrastructure Security
PASSED
Hosted on Cloudflare Workers — enterprise-grade DDoS protection and global edge network
HTTPS enforced on custom domain (elsasbeachhouse.com)
No server to patch — serverless architecture eliminates OS-level vulnerabilities
🛡️
Guest Portal Protection
PASSED
Rate limiting on guest booking submissions — 60-second cooldown prevents spam
Availability is re-validated server-side on every submission
No guest account creation required — zero attack surface for guest credentials
A+
Security Grade
6 / 6 checks passed
API Protection ✓ Pass
Auth Security ✓ Pass
Data Integrity ✓ Pass
Access Control ✓ Pass
Infrastructure ✓ Pass
Spam Protection ✓ Pass
Tech Stack

Built With Modern Tools

Zero monthly infrastructure cost. Serverless, fast, and globally distributed.

🌐 Vanilla HTML/CSS/JS
⚡ Cloudflare Workers
🗄️ Supabase PostgreSQL
📧 EmailJS
🔒 SHA-256 Hashing
📊 Excel Export
🖨️ Print-ready Slips
☁️ Custom Domain CDN