UnbreakMyApp

Fix guides

Plain-English fixes for the most common breaks in apps built with Lovable, Bolt, v0 and Supabase.

Lovable app shows a blank screen (or spins forever) after login

Why Lovable + Supabase apps freeze after sign-in, and how to fix the onAuthStateChange deadlock and stuck loading states.

Supabase Row Level Security is off: your app data may be public

If Row Level Security (RLS) is disabled or too permissive, anyone with your public key can read or edit your tables. Here is how to check and fix it.

Stripe payment succeeds, but the paid feature never unlocks

The customer was charged but their account was not upgraded. Usually a webhook problem. Here is how to trace and fix it.

Secret API key exposed in your frontend code

OpenAI, Stripe secret or Supabase service_role keys in browser code can be stolen by anyone. How to find, rotate and move them to the server.

Custom domain or SSL not working on Lovable or Vercel

Domain stuck on "Verifying", showing an old site, or a security warning? The DNS records that usually cause it and how to fix them.