01
Publishing
Is the intended production version published with the correct public access setting?
A preview or restricted deployment is not the same as the customer-facing release.
Free Lovable launch checklist
The final checks between “published” and ready for customers.
Work through 12 focused launch checks and receive your five highest-priority next actions. No account and no connection to your app.
✓ About 4 minutes✓ No credentials✓ Immediate action list
0 of 12 answered
02
Domain
Is the final domain live, primary, HTTPS-enabled, and free of redirect loops?
Lovable provisions HTTPS, but DNS, primary-domain selection, and redirects still need verification.
03
Discovery
Are the title, description, favicon, social preview, robots rules, and sitemap production-ready?
Default metadata makes a finished app look unfinished and limits discovery.
04
AuthenticationLaunch blocker
Do OAuth callbacks, password-reset links, email links, and allowed origins use the production domain?
Preview URLs often remain in provider settings after launch.
05
AuthorizationLaunch blocker
Have signed-out, normal-user, and privileged-role access paths been tested directly?
Hidden navigation does not prevent a direct route or API request.
06
DataLaunch blocker
Have cross-user data isolation and RLS behavior been verified with two synthetic users?
A working account does not prove one customer cannot reach another customer’s data.
07
PaymentsLaunch blocker
Are checkout, cancellation, failure, refund, and paid-access updates verified in the intended environment?
Payment success pages can disagree with server-side entitlement state.
08
Email
Do production emails arrive with the intended sender, branding, domain, and working links?
Authentication and customer support often fail outside the browser.
09
Experience
Can the primary conversion and product flows be completed on a real phone and with a keyboard?
Responsive appearance does not guarantee usable forms, dialogs, or focus order.
10
Trust
Are seller details, support, privacy, terms, refunds, and deletion instructions final and public?
Placeholder policies and missing support details weaken trust and create operational risk.
11
Operations
Are production errors, logs, alerts, and a rollback path assigned to a named owner?
A launch is an operating event, not only a deployment.
12
Measurement
Can you measure visits, free-tool completion, plan creation, checkout start, and purchase?
Without funnel events, traffic cannot tell you where conversion is failing.
Focused guidance
Publishing is a deployment step. Launching is an operating decision.
Callbacks, links, metadata, and access settings can differ from previews.
Roles, data isolation, and paid access need adversarial synthetic-user tests.
Monitoring, support, rollback, and measurement need names before traffic arrives.
A focused self-assessment is not proof, certification, or a substitute for the complete evidence-based inspection.