Launch guides.
What Patch keeps finding on AI-built sites, and how to fix it. Plain English, with links to the official guidance. None of it is legal advice.
- Does a vibe-coded site need a cookie banner?Do you need a cookie banner or cookie consent on a site built with Lovable, Bolt or v0? What UK, EU and US rules ask for, and how to check what your site sets.Updated
- What Lovable and Bolt don't set up for youWhat Lovable and Bolt set up by default and what you still need to check before launch: cookie consent, privacy policy, Supabase RLS, security headers and SEO.Updated
- Privacy policy checklist for AI-built appsA privacy policy checklist for apps built with Lovable, Bolt or Cursor: what UK GDPR, GDPR and CCPA ask for, and how to name Supabase, Stripe and AI APIs.Updated
- Supabase row-level security, explained for non-developersA plain-English Supabase RLS check: why your public key is in your site's code, what 'RLS disabled' means, and how to lock tables down in the dashboard.Updated
- Security headers in 10 minutesAdd security headers to your site: what CSP, HSTS, nosniff, Referrer-Policy and Permissions-Policy do, with copy-paste Netlify, Vercel and Cloudflare setups.Updated
- SEO basics for single-page apps (why your Lovable site might be invisible to Google)Why React and Vite single-page apps can look empty to search engines and link previews, what Google says about JavaScript SEO, and the fixes that matter.Updated
Free scan
See what Patch finds on your site.
Free, no signup. You get a score, every issue with its severity, and full detail on the top three.