Hi, I'm Maud.

I'm a Developer Relations Engineer at Google working on Chrome.

Today, my focus is on web security, privacy and AI.

^{How it all started! Qt/OpenGL with C++.}

I started coding with C++ in 2013 and was quickly drawn to the web. Since 2015, I've built many web products using JavaScript, TypeScript, React, and React Native. I also had a fun stint as a UX/UI designer.

I then moved into Developer Relations Engineering. I love being a bridge between developers and product/eng teams. I build developer tools, write demos and docs, run developer research, find DevX bugs and pain points, design solutions, and channel feedback to product teams. I also speak at conferences.

In the physical world, I live in Paris. You can find me roaming around taking street photos. Online, find me on BlueSky and LinkedIn (previously on X).

⭐ Open-source demos and tools

Security, Privacy, Authentication

• Autofill observer: Code • Live demo
• Reporting API
• ROR (Passkey reuse across sites)
• 2FA with WebAuthn and a secuity key

AI

• Toxicity warning with client-side AI: Code • Live demo
• Product review autorating with client-side AI: Code • Live demo
• Product review suggestions: Code • Live demo
• Performance tups for client-side AI: Code • Live demo

Developer tooling

• strict-csp-html-webpack-plugin: A webpack plugin that configures a strict, hash-based CSP for a single-page application. It uses the strict-csp library to form a CSP and hooks into the popular HtmlWebpackPlugin to set up this CSP as a meta HTML tag. Source code • npm entry
• noise-lab: A tool to onboard and experiment with summary reports and noise in Privacy Sandbox Measurement APIs. Source code • Docs
• I advocate / file bugs for DevX improvement in Chrome DevTools and Chrome browser.

👩🏻‍💻 Developer research and communication

• I bridge external devs with internal teams to land DevX improvements, like for example here.
• I research what web developers think about AI.
• I drive technical outreach with all early testers of a privacy-preserving web API for ad conversion measurement.

✏️ Articles and docs (selection)

Security, Privacy, Authentication

• Measure browser autofill on your forms
• Seamless credential sharing
• Full guide on server-side passkey implementation: Part 1, Part 2, Part 3, Social media post
• Passkey reuse across sites
• HTTPS for local development: When and How
• Referrer and Referrer-Policy best practices
• Reporting API
• Chrome's move to one-time permissions
• Security headers quick reference
• Debugging guide for Attribution Reporting
• Attribution Reporting series
• Secure your site with two-factor authentication with a security key (WebAuthn)
• [Video series] Tutorial: Noise Lab

AI

• 2-part developer guide on client-side toxicity detection: Part 1, Part 2, Social media post
• Understand LLM sizes
• Practical prompt engineering for smaller LLMs
• [Improve performance and UX for client-side AI](https://web.dev/articles/client-side-ai-performanc

🎙️ Talks

Talk	Where & When
No buzz, just build: client-side AI	🕸️ Google I/O online · 2024
Passkeys, for a passwordless future	🇫🇷 DotJS Paris · 2024
Passkeys 101	🇩🇪 MunichJS · 2023
Passkeys workshop	🇺🇸 Authenticate San Diego · 2023
XSS protections with strict CSP	🇯🇵 Chrome Tech Nights Tokyo · 2023
Passkeys, autofill, 3P cookies: the Web in 2023	🇩🇪 Berlin GDE Summit · 2023
The hitchhiker's guide to web privacy	🇳🇱🇫🇷 Fronteers Utrecht + DevFest Nantes · 2022
HAUNTED: Chrome's vision for post-Spectre web development	🕸️ SnykCon online · 2021
Introducing the privacy budget	🕸️ Chrome Developers Summmit online · 2020
Prepare for a more private web	🕸️ Google I/O online · 2021

^{One of my favorite talks ❤️ Web security, Tokyo. I love small, engaged audiences I can directly interact with.}

^{DotJS stage, 1000+ live attendees. 2024, Paris.}

💙 Community

I drive and advocate for hosting tech events for underrepresented groups:

• Women Techmakers Paris meetup
• Ladies of Code Paris meetup

🤝 Misc OSS contributions

• I added one-time permission implementation to the Chrome permissions public demo
• I contributed dev guidance to passkeys.dev
• I improved onboarding docs for a Gen AI prototyping tool
• I reviewed the Privacy chapter of the Web Almanac 2021
• I coordinated a full course on web privacy
• I filed a common issue on Transformers.js

🥤 Fun! Fun!

• artplz: Art in your terminal! It's dynamic, and should work with any painter you enter as a CLI argument. Under the hood, there's a Wikipedia scraper.
• cssunrise: A 1-minute sunrise in CSS.
• Hello worlds: Planets and exoplanets in 3D.

^{My artplz project}