What does PreLaunchQA check?

PreLaunchQA loads your web app in a real Chromium browser and checks for console errors, failed network requests, broken links, missing meta tags, images without alt text, form fields without labels, mixed content issues, and more. Every finding includes raw browser evidence.

Who is PreLaunchQA for?

PreLaunchQA is built for developers using modern frameworks and AI coding tools like Next.js, React, Bolt, Cursor, and v0 who want to verify their web apps actually work in a real browser before going live.

How is PreLaunchQA different from Lighthouse or PageSpeed?

PreLaunchQA focuses on functional correctness — real browser console errors, network failures, and dead links — rather than performance scores. It verifies domain ownership before scanning, provides before/after comparison diffs, and targets runtime errors in production.

Yes, the Sample Scan is free and gives you a single-page check with full raw browser evidence. For deeper audits, the Launch Check is $49 one-time and the Monthly Re-test plan is $99/month for unlimited checks.

Do I need to give PreLaunchQA access to my code?

No. PreLaunchQA only needs the URL of your live or staging site. It loads the page in a browser just like a real user would. You verify domain ownership via DNS record, meta tag, or file upload before any check runs.

Does PreLaunchQA work with apps built in Next.js, React, Cursor, or Bolt?

Yes! PreLaunchQA is specifically optimized for modern web applications generated by Next.js, React, Cursor, Bolt.new, and v0. It catches silent runtime console errors, unhandled async states, broken routes, and missing meta tags before your users encounter them.

Privacy Policy

Last revised: October 2026. Clear, honest data practices with zero third-party ad tracking.

1. What we collect: waitlist and pre-order

If you join the list or pre-order, we store your email address, the app URL you entered, which builder you selected, whether you agreed to product updates, and a cryptographic one-way HMAC hash of your IP address used solely for rate limiting to prevent form abuse. Raw IP addresses are never persisted in the database.

2. What we collect: your account

If you sign in with an email magic link, we store your email address. If you use Continue with Google, we receive and store your email address, name and profile photo. Your sign-in session tokens are stored in your browser's local storage. Supabase Auth records sign-in metadata such as browser user agent and authentication timestamps.

3. What we collect: apps and checks

When you add and verify an app, we store its origin URL, builder category, and verification proof records (DNS TXT, meta tag, or file check logs). When an automated browser check runs, we store the target URL, check lifecycle status, and findings observed during execution: browser console errors, failed HTTP request URLs, image accessibility attributes, and element DOM snippets.

4. Billing, payment data, and Stripe

When you purchase Launch Checks or subscribe to the Monthly Re-test plan, payment processing is handled directly by Stripe. PreLaunchQA never receives or stores your full credit card number, CVV, or banking details. We receive only transaction identifiers, customer IDs, and subscription status tokens required to fulfill and manage your account entitlements.

5. Data retention and ephemeral credentials

Public check findings and screenshot evidence are retained for 30 calendar days to enable before/after re-scan comparisons, after which they are deleted. When future releases support authenticated test flows with user-provided test credentials, those credentials will be encrypted at rest with AES-GCM and completely purged within 24 hours of check completion.

6. When you browse

Cloudflare terminates SSL, serves cached assets, and mitigates DDoS threats. We use privacy-preserving Cloudflare Web Analytics to measure site visits without setting tracking cookies. Fonts are served from Google Fonts (fonts.googleapis.com and fonts.gstatic.com).

7. Who can see your data

Your apps, verification tokens, and scan findings are protected by Postgres Row Level Security (RLS) and are only accessible by you when authenticated. Neither public visitors nor other users can view your apps or reports.

8. Communications and unsubscribing

We only send transactional emails relating to your checks, account security, and billing receipts. Marketing updates are strictly opt-in and include a single-click unsubscribe link at the bottom of every message.

9. Deleting your data and privacy rights

Under GDPR, CCPA, and DPDP, you have the right to access, rectify, export, or permanently delete your personal information. To request complete deletion of your account, apps, and scan history, email [email protected] from your registered address. Deletion requests are fulfilled within 30 days.

10. Sub-processors

We partner with trusted service providers: Supabase (database, auth, and storage, Mumbai ap-south-1), Cloudflare (global edge network, Workers hosting, and DNS), Stripe (PCI-compliant payment processing), Google (OAuth authentication), and Resend (transactional email delivery).