mudshark.is
A new site and booking system for MudShark in Hella. Magnús H. Jóhannsson, a PhD botanist and ecologist, drives small private groups around South Iceland in a modified Land Rover and explains the land along the way.
Overview
MudShark is a small tour operator in Hella, South Iceland. Magnús H. Jóhannsson, a PhD botanist and ecologist, takes private groups out in a modified Land Rover Defender, six guests at most. The old site ran on Weebly, which is closing in Iceland, and its booking pages had gone empty. We built a new site in English and Icelandic on and . Guests pick a date, see what is free and pay by card through . Magnús runs bookings, tours, page text and email himself in an Icelandic admin. The work took 52 days from brief to launch, and the site opened on 14 October 2026.
Tourism · Private super-jeep tours
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
This is just a screenshot, better to view the live site: mudshark.is
Problem
MudShark is one vehicle and one guide. If two groups book the same morning, one of them is let down, so the booking system can never sell the same slot twice. The site speaks first to travellers who plan from home and want to pay on the spot. Some guests still call or email and pay later. The old site ran on Weebly, and its booking pages had gone empty. Its URLs mixed upper and lower case, and other sites linked to both spellings. Weebly is closing in Iceland in 2026, so the old site was going to disappear either way. Magnús had to run the text, prices and calendar himself without calling a developer. Terms and privacy also had to hold up before the first payment came in.
Approach
The site runs on over , with access rules () on every table. The booking engine lives in the database itself. Each departure claims the jeep and the guide, and refuses any booking that overlaps another, even when two people try in the same second. While a guest pays, the slot is held for fifteen minutes. 's card form sits inside the page. A payment is confirmed both by a signed and by a regular sweep, so none is lost when a connection drops. Online booking closes 48 hours before departure, where the right to a refund ends. The admin is in Icelandic and asks for a code at sign-in. There Magnús records phone bookings and sends the guest a payment link. We mapped 36 old Weebly URLs, added structured data for search engines and opened the site to AI agents over MCP.
Outcome
The site opened on 14 October 2026. Guests book and pay online and get a confirmation, the terms and a calendar file by email at once. Magnús gets an email for every booking and sees its state in the admin. The evening before a tour the guest gets a reminder, and the day after one request for a Tripadvisor review. The old Weebly URLs land on the right pages. The logo on the site is Magnús's own file, not a redrawing.
Payment link
Most guests book online, but some call. That used to mean a bank transfer and chasing it. Now Magnús records the phone booking in the admin and the slot is claimed at once. One click on “Senda greiðslutengil” opens a payment for what is still owed and emails the guest a link in their own language. The link opens a page on mudshark.is with 's card form. Once the guest pays, they get the same confirmation as someone who booked online, and Magnús gets an email. If the link expires, Magnús sends a new one and the old one stops offering payment. If a guest still manages to pay twice, the system records a refund owed rather than keeping the money.
Key features
- 01A booking calendar that only offers times when the jeep and the guide are both free
- 02Card payment with inside the page, confirmation by email at once
- 03Double bookings ruled out in the database itself, not only in the interface
- 04Payment links for bookings that come in by phone or email
- 05An Icelandic admin with sign-in and recovery codes
- 06Bookings, tours, calendar, page text, FAQ and email wording in one place
- 07A reminder the evening before a tour and one review request the day after
- 08English at the root, Icelandic under /is, light and dark themes
- 09An OCTO so resellers can sell the same departures
- 10An MCP server, and for AI agents
- 1136 old Weebly URLs that land on the right pages
- 12First-party analytics without cookies, and consent that is recorded
Booking engine
- 01Each tour declares what it claims, a jeep and a guide, and for how long including the drive back
- 02 refuses overlaps with an exclusion constraint, so a double booking is impossible even when two people try at once
- 03A slot is held for fifteen minutes while the guest pays, and released automatically if no payment arrives
- 04Online booking closes 48 hours before departure, where the right to a refund ends
- 05Seasons and weekdays per tour, closed days set in the admin calendar
- 06The calendar opens on the first month with a free day, so a guest never lands on an empty month
- 07The terms version a guest accepted is stored with every booking
Payments
- 01's card form sits inside the booking page, card numbers never pass through our servers
- 02's webhooks are verified by public-key signature before anything is recorded
- 03A regular sweep asks about open payments, so a confirmation arrives even when a is lost
- 04A payment link for phone bookings: one click in the admin, the guest pays by card on a page of their own
- 05The link carries a secret token, stored only as a SHA-256 hash
- 06A double payment, a wrong amount or a payment after a cancellation is recorded as a refund owed, never kept
- 07Magnús makes refunds himself in and marks them done in the admin
Admin
- 01Everything in Icelandic, with a help page that walks through every task step by step
- 02An overview of upcoming tours, outstanding payments and the last 30 days of sales
- 03Record a phone booking: the slot is claimed at once, paid or unpaid
- 04A cancel form that works out the refund from when the cancellation arrived, by email or phone
- 05A tour editor in both languages: price, length, group size, season and photos
- 06FAQ, page text and the wording of every email in English and Icelandic
- 07A sales report by month and tour, downloadable as
- 08A search-engine page that sends every page to Bing and others through at once
- 01A confirmation with the terms attached and a calendar file for the tour
- 02A reminder the evening before: the time, the pickup, what to wear and what happens if the weather turns
- 03One request for a Tripadvisor review the day after, which the guest can decline
- 04Mail to Magnús for every booking, payment and refund that needs doing
- 05's sign-in mail goes through the same template via the Send Email hook, all from mudshark.is
Privacy & security
- 01 on every table: the public reads published tours only and can never read a booking
- 02Guests' phone, pickup and notes are deleted 90 days after the tour, names and payments kept for bookkeeping
- 03Abandoned checkouts are deleted automatically when no money moved
- 04Cookie consent by category, each choice recorded as proof, Google and Meta tags only after consent
- 05First-party analytics without cookies or IP addresses
- 06A nonce-based in the admin, rate limits on forms and sign-in
- 07Terms, privacy policy and accessibility statement in both languages
Search & AI agents
- 0136 old Weebly URLs land on the right pages in one hop, whatever their case
- 02Structured data: a travel agency, a guide with a PhD, tours with prices, and FAQ
- 03Sitemap and for English and Icelandic, an OG image for every page
- 04An MCP server AI agents talk to when looking for tours and free dates
- 05 in the browser, and describing the site to language models
- 06's agentic-browsing check runs on every change
By the numbers
- 52
- Days from brief to launch
- 6
- Tours bookable online
- 0
- Double bookings possible
- 48 klst.
- Booking closes before departure
- 36
- Old Weebly URLs that land right
- 40
- Automated test suites
Stack
and , hosted on . with access rules on every table and 33 versioned migrations. The booking engine is functions with exclusion constraints. runs the payment sweep, the reminders and the data deletion. Payments through , email through . An OCTO for resellers and an MCP server for AI agents. 40 test suites, including an end-to-end checkout against a local database and a mock .
- Next.js 16
- React 19
- TypeScript
- Tailwind CSS v4
- next-intl
- Supabase Postgres
- Supabase Auth (TOTP MFA)
- pg_cron
- Teya
- Resend
- OCTO API
- Model Context Protocol
- Zod
- Playwright
- Vercel
Related services
Related work
(2)isor.is
A new site for Iceland GeoSurvey. ÍSOR is a leading Icelandic company working internationally, giving the geothermal industry expert advice and technical knowledge across the geosciences, for both high- and low-temperature fields.
manhattan.is
A new site for Manhattan ehf. Manhattan is a marketing, management and consulting firm with decades of experience in Icelandic business.



