Launch checklist for AI-built apps

By LeakPatrol · Updated 22 October 2026

AI tools build the app, but they skip the boring launch basics. So the first time you share your link, it shows a template title or the builder's logo instead of your app. Here are the nine things to check before you post it anywhere.

The nine checks

1. Page title

Starter templates ship titles like Lovable App, Vite + React + TS or Create Next App. That's what shows in browser tabs and in Google.

Fix: your app name plus what it does, under 60 characters. For example, "Recipe Box · Plan a week of meals in 5 minutes".

2. Search description

Defaults like Lovable Generated Project end up as the text under your link in search results.

Fix: a <meta name="description"> tag with one or two sentences on what the app does and who it's for, under 160 characters.

3. Link preview

X, LinkedIn, WhatsApp and Slack build the card for your link from og:title and og:image. Many Lovable apps still use Lovable's own preview image. The image also needs a full https:// address: a relative one like /og.png shows no image at all.

Fix: a 1200×630 image with your app name, plus og:title, og:description, og:image and twitter:card set to summary_large_image.

4. Favicon

Without one, browser tabs and bookmarks show a blank page icon.

Fix: add your own icon and link it with <link rel="icon" href="/favicon.svg">.

5. Works on phones

Without a viewport tag, phones show a zoomed-out desktop page.

Fix: add <meta name="viewport" content="width=device-width, initial-scale=1"> to the <head>.

6. Google can find your pages

A robots.txt with Disallow: / hides the whole site from search engines. Without a sitemap.xml, apps built as one page often get only the home page indexed.

Fix: add /sitemap.xml listing each public page, add a Sitemap: line to robots.txt, and submit the sitemap in Google Search Console.

7. Visitor analytics

Without analytics you can't tell whether a launch post brought anyone in, or where they came from.

Fix: a privacy-friendly tool such as Cloudflare Web Analytics (free), Plausible or Umami. Most need just one script tag.

8. Your own domain

A .lovable.app or .vercel.app address looks temporary, and if you move later, the links you've shared stop pointing at you.

Fix: buy a domain (about £10 a year) and connect it in your builder's or host's domain settings. Update your Supabase Auth redirect URLs too.

9. Email lands in the inbox

Without a DMARC record on your domain, sign-up and password-reset emails are more likely to land in spam.

Fix: add a TXT record named _dmarc.yourdomain.com with the value v=DMARC1; p=none;, and check SPF and DKIM with your email provider.

Check all nine in a minute

Paste your app's address into the free LeakPatrol scan. Below the security results there's a launch checklist that checks all nine, with a fix and a copy-paste prompt for Lovable, Bolt or Cursor for anything that's missing. It doesn't change your security grade.

Check your app in a minute

Free, read-only, no sign-up. Every problem comes with a plain-English fix and a prompt for your AI tool.

Get the 10-point checklist

Every check we run on AI-built apps, with how to do each one yourself. Straight to your inbox.

Questions

How do I change the link preview of my Lovable app?

Edit the og:title, og:description and og:image tags in index.html, or ask Lovable to. Use a 1200×630 image with its full https:// address, not a relative path like /og.png.

Why does my app show the wrong title in Google?

The template's default <title> and meta description are probably still in index.html. Replace them with your app name and a sentence on what it does, then ask Google Search Console to re-crawl the page.

Do I need a custom domain to launch?

No, but your own domain looks more trustworthy, and the links and search ranking you build keep working if you ever change host.