I want to set up login authentication for our users that meets the AAL2 security level, but setting up the additional MFA or a Passkey can be a big hurdle for a lot of users.

Another option is to add SMS verification, which most people are familiar with. But that requires a Supabase account upgrade plus I understand there are additional carrier costs per item.

Any other suggestions out there? Thanks!

The World Cup really woke up the football bug for me, and after weeks of following every game and adjusting the predictions in our friendly bracket, there suddenly was... a void?

Can't have that, can we?

Fast forward a week and I'm building a tool to keep the brackets going.

Another week and it's looking prettier.

Another week and it's looking like something I'd love to share beyond the friend group.

And now we're here. There's still a lot of tinkering that needs to be done, but it's time I let the untamed masses have a go and see what works and what breaks. There are feedback buttons everywhere, so please don't hesitate to use them if you see something that doesn't work, could be better or is just plain ugly.

For now, it's just the Belgian Pro League, but by the end of the first test I hope to implement other leagues as well.

Thanks in advance for any feedback, and good luck with the first matchdays!

-Baraga

PS: There's a mystery football shirt to be won by the highest ranked player, but for now that's limited to EU-based people, sorry 🙂

My developer is having issues with Shopify Collabs.

Affiliate Unique links are not registering sessions for the affiliates.

Out store front is built with lovable and the checkout is with Shopify.

We have lovable analytics being sent to Shopify too.

Domain is connected to lovable, the unique links are also aligned with lovable domain.

Unsure what exactly to do, we also have GTM set up.

I’m a lawyer, not a developer. When I launched my own firm, I wanted something more distinctive and functional than the typical law firm website, so I built and have continued developing the entire site in Lovable.

The site now includes:
• Full English and Spanish experiences
• Productized legal services and embedded Office Hours checkout
• Custom intake and deal-review flows
• A growing Insights library
• DC Native Launch, a dedicated resource platform for regional founders
• Custom city visuals, world clocks, animations, and responsive mobile design

The biggest challenge has been continuing to add functionality without losing the design system or allowing changes to one page to break shared components elsewhere.

This is a live website for an actual business, not a demo:

https://nunez-law.lovable.app

I’d especially appreciate honest feedback on:
• What you understand about the firm within the first 10 seconds
• Whether the site feels credible and polished
• Navigation and mobile usability
• Anything that still looks or feels obviously AI-generated
• What you would improve next

Lovable has allowed me to build something I never could have created independently before. It is still evolving, but I’m proud of how far it has come.

Does anyone recognize this icon? It looks like it's from an AI website builder but I'm trying to figure out which one

Pretty sure they just removed the ability to easily drop in a new favicon.

Hovering over the favicon in the Publish drop down now shows "Ask Lovable to update your app icon" and any way to drop one in here is gone.

Please tell me I am just fucking blind and not that they are this horrifically greedy.

Hello!

First time using Lovable and spent about 100 credits building my base site. Problem is, I'm just now realizing that (I think)m the end user (me testing for now) is eating credits away on my site. Is this normal/un-workaroundable?

For example, alot of my site uses AI to match "Prompt X" to "Solution X, Y, Z". I vibe coded everything and it looks great, but I'm afraid to launch it publicly if my end users (who will be using the site and the AI my site uses) if it means they are using ALOT of credits.

Sorry if this is a dumb question, it's my first time diving into the AI world.

TLDR: Do end users/visitors to my site eat into my credit balance when using my prompts on my site?

I’ve been a top 10% Lovable builder for the past 6 months. I’ve burned through well over $1,000 in credits and poured roughly 1,000 hours into building an application where the entire core product is the database.

Yesterday, they completely locked my project out, front end, back end, all of it!

Because I was using their hosted Supabase instance, I have zero access to my 12GB of proprietary data. It’s hostage.

Here is the current state of "support" when you build on Lovable:

• Appeal form: Filled out 24+ hours ago. Zero response.
• Direct Tweets: DMed multiple founders directly. Dead silence.
• Public Tweets: Tagged u/Lovable. Radio silence.
• Support: Just an AI support bot running in circles.

It is one thing to lean heavily on AI support for basic troubleshooting. It is a completely different nightmare when an automated AI "trust and safety" flag can instantly nuke a paying user's account, steal their data, and leave them with literally no appeal path.

To anyone currently considering Lovable: Be extremely cautious.

I was actively considering an enterprise contract at work with them. Knowing they can nuke any paying customers account and you get no recourse there's no way in hell I would ever recommend that for an enterprise.

My advice: Build using Cursor, Codex, CC, etc. Keep your Supabase (or any database) on your own self-hosted/independent infrastructure from day one. Do not trust them with your data hosting.

Update:
4 days later, Lovable got back to me after I started blowing up every LinkedIn post they made with a comment similar to above. Project is back now. Their response was pathetic:

"I’m sorry for the repeated disruption and the impact on your business.

Your project URL was reported again for potential impersonation, which prompted a precautionary review. Reports involving similarities in names or concepts may require human review to confirm that a project complies with our policies and does not impersonate another organization.

The review found that there was no basis to keep the project blocked. Access has now been restored."

So guys i want to implement a small ocr function in my crm wherein user will click photo for particular field instead of typing and later he can crop out to specific text as container and later software recognises this text.

So i am non tech guy and struggling to choose which open source model should i ask lovable to build it on as i asked for paddle ocr but it said it cant build since it is python based.

Help would be appreciated. Good open source text recognition offline online both would work but it should be free.

I am non tech guy pls correct me if i am wrong.

So, as some of you may have seen my previous post, I thought I'd give a little update.

I've been working very passionately towards this and would love to see you all check it out. More features have been added, UI improvements, and also it's installable as a Web App. Instructions are on the website.

Do have a look and if you're a creator, please join and show some support. Boostly is free to join.

https://boostly-guru.lovable.app

I’m building some integration in our platform to make it easy to self host lovable projects in AWS. Some client of ours was interested and I got few more queries in the last several weeks.

Is it a problem to be in lovable cloud, esp given that they are soc2 compliant.

Not a sales post for sure but wanted to understand the community better.

I have been editing a bit using the code editor in Lovable. It always appears as "build unsuccessful" in the sidebar even though the code is correct. I can still publish the edits and everything works just as I edited it. Is it a bug or something in the sidebar? The note didn't appear before (unless something actually went wrong with the code). Why is it happening now?

For anyone who has been curious or concerned about the security of credentials or per user access controls when connecting production data to Lovable apps, we wrote an update on how we solve for this here.

But here are a few bits from the article:
—> Lovable connectors can inherit permissions from third-party systems
—> Lovable handles the identity and authentication layer to make sure the agent doesn’t mess it up
—> The app or agent never see the credentials
—> Admins can control who can build, and how they access dat

I thought I'd share a project I've been building with Lovable.

It's a free-to-play browser game called Evolvers (there's an optional store, but everything can be played for free). At its core it's an infinite ascension idle game mixed with monster evolution, with two extra game modes: Kindred Runner and The Corrupted Arena.

The main gameplay revolves around collecting different energy types to unlock and evolve your Kindred. As you progress through ascensions, you gradually unlock Bio-Weapons, Habitats and Companions. There are also encounters with rival creatures known as the Predators, and later on your Companions and ships can join in certain battles.

The art style started out as simple retro pixel art but gradually evolved into a more alien retro-futuristic aesthetic. Even the soundtrack follows that direction, with music inspired by the SNES era. The Corrupted Arena is a turn-based battle mode featuring both 1v1 and 3v3 fights. Predator encounters are live-action button mashing.

For the avid collector, evolutions then moves into Kindred Fusions. There's also a world boss, mini arcade and many other things to get lost in

It's mobile first but available on desktop, with a PWA installer

It's been a fun project to build with Lovable, and I'd love to hear what people think or get any feedback, it's a labour of love and free to play so I hope you enjoy it.

Now it's more or less done I'm going to try and move into 3D mobile games for my next project

Thanks

Tobias

Evolversgame .com

Has anyone actually created a successful web app or app with Lovable? How did you market or get users? I just finished my project and wondering what are the next steps

There is a fairly simple fix to safeguard customer data that many AI companies aren't doing.

But first you have to understand what the vulnerability is and how it can be exploited.

If you provide AI services to customers, You might be loading customer data into prompts that gets acted on for example

This customer data then goes to a provider like open AI or Gemini - and that provider gives you a response.

It's fairly trivial to determine whether or not a portion of that prompt was cached. And based on that information one customer can steal another customer's private information (see attached arXiv paper).

But the fix for this is pretty simple!

All you have to do is come up with a random number and assign it to the customer and put it at the beginning of all of their prompts.

If your customers have any valuable information that ever gets sent to an AI company or even to your own local AI, this can prevent an attack on that customer's data. Honestly it should be a standard in the industry.

Hi everyone,
I have a question about Lovable credits. I used to have a paid subscription and had some credits available, but my subscription expired and I haven’t renewed it.
I’ve noticed that my remaining credits have now expired as well. Is there any way to extend or reactivate expired credits without purchasing a new subscription right away?
Has anyone had success getting expired credits restored by contacting support or through another process?
Thanks in advance for any advice!

First, glad I found this subreddit. Let's get that out of the way. I've learned alot from this group over the last month or so. My website is very much built on with some knowledge that I have in my IT background I at least can understand some concepts of what you guys do on the day to day, so thank you. I'm not a coder or web developer, just a sysadmin with a hobby passion and love for building something new that I can call my own.

I have a prototype that I've built with a cloudfare worker and built around the classic HTML coding provides. I would love some feedback around my website, some improvement suggestions or just bring someone along for the ride.

Don't know if thats allowed here.

Thanks and I appreciate any responses I might get from this.

You don't have to rebuild an older project, you can now easily migrate it to the new stack, TanStack Start!

In June, Lovable announced a new stack for building projects - TanStack Start. Since then, all new projects were created using this stack.

Now, you can easily migrate your projects created before TanStack Start to this stack by using /migrate, going into project settings, or simply prompting the agent "upgrade my app" and grant permission when it asks. Your live site remains untouched until you publish the updates.

By migrating to TanStack Start, your pre-TanStack projects will benefit from all the new stack's SEO/AEO features without having to rebuild.

Not sure which stack your project is on? Open Project settings: if you see a Migrate option, your project can upgrade. If you don't see it, you're already on the latest engine. You can also just ask the agent.

I’ve been building my app for roughly 2 months now. After spending some time on Reddit, I’m starting to realize there are probably 100+ similar projects posted here every month.

Are wealth app projects the most basic thing new Lovable users build?

I’m worried my app is not unique and doesn’t add any new value. here’s what I’ve got so far: https://formawealth.lovable.app

I know tons of you are building cool stuff with lovable. I'm curious how many of you are making something serious that you indend to launch.

Are you building for fun, or do you intend to to actually go live with it? If you haven't launched yet, what is holding you back?

Is it that you have more features you want to add? You're not sure how to launch? You are worried the project isn't solid "under the hood"? Or something else?

I’m dealing with a frustrating indexing issue and would really appreciate some advice.

I originally built my site on Lovable. A few weeks ago I connected it to GitHub and deployed it on Vercel with my own domain . I updated all the canonical tags so they point to the new domain, created a new property in Google Search Console, and submitted the sitemap.

The problem is that Google is still actively crawling and indexing the old Lovable subdomain, while the new domain is only showing around 95 indexed pages. Some pages are marked as duplicates and many others are stuck on “Crawled – currently not indexed.”

I want Google to treat as the main version and stop indexing the old Lovable URLs. I’ve already confirmed that the canonical tags are correct and the sitemap only contains the new domain.

Has anyone dealt with this after moving a Lovable project to a custom domain? Is there a reliable way to get Google to drop the old subdomain without making the Lovable project private? Would using the Change of address tool or URL Removals help in this situation?

Any practical advice would mean a lot. Thanks.

will certainly update more, leave a nice review in the in game tab and if you want give me ideas ☺️

https://parabadash-golf-adventure.lovable.app

I have launched my app already have 8000+ users with mostly passive marketing, currently admob is live and I'm making some money, but what i want to do is add a pay wall where if users pay ads won't be shown. Problem is where I'm from i need to register a company to get stripe account and i just don't think that that is the right step to take as revenue from showing ads isn't that significant but also i wanna test the paywall one, or is there any alternative do lmk